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MJ:  All  of  them  or  just  some  of  them? 

ATCtCPT  MORROW]:  With  respect  to  the  Farah  documents  there  were 
remnants  of  those  documents  from  the  unallocated  space  on  the 
personal  computer,  remnants  of  the  Department  of  State  cables  on  the 
unallocated  space  on  the  personal  computer,  remnants  of  the  GTMO  — 
some  of  the  GTMO  documents  are  in  the  unallocated  space  on  personal 
computer.  Yes,  there's  evidence  of  those. 

MJ:  Are  they  in  the  deleted  spaces  or  the  unallocated  spaces? 

ATC [CPT  MORROW]:  Same.  They  —  essentially  they  don't  —  they 
don't  make  their  way  to  the  unallocated  side  unless  they've  been 
deleted. 

MJ:  Okay.  Just  a  minute.  And  where  would  I  find  this? 

ATC [CPT  MORROW]:  You  could  refer  to  Mr.  Johnson's  testimony  or  - 
-  I  haven't  reviewed  his  report  in  a  while,  but  I  believe  his  report 
indicates  - 

MJ:  Is  that  Defense  Exhibit  Juliet? 

ATC [CPT  MORROW]:  Yes,  that  Exhibit  Juliet. 

MJ:  Okay,  thank  you.  Captain  Tooman? 

ADC [CPT  TOOMAN]:  Can  I  have  a  moment.  Your  Honor. 

MJ:  Yes. 

ATC [CPT  von  ELTEN] :  Your  Honor,  the  Walter  case  cited  by  the 
government  in  its  brief  also  talks  about  database  valuation. 

MJ:  Is  that  in  the  first  brief  or  the  second  brief? 
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ATC [CPT  von  ELTEN] :  I  believe  that's  in  the  first  brief,  ma'am. 
It's  part  of  a  string  cite,  I  believe. 

MJ:  Okay.  Can  you  get  me  the  case? 

ATC [CPT  von  ELTEN]:  Yes,  ma'am. 

[Pause] 

MJ:  All  right.  Just  a  minute. 

[Pause] 

MJ:  Captain  Tooman? 

ADC [CPT  TOOMAN]:  Nothing  to  add,  Your  Honor. 

MJ:  All  right.  Is  there  anything  else  we  need  to  address  at 

this  point? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

ATC [CPT  MORROW]:  No,  Your  Honor. 

MJ:  This  look  like  a  good  time  for  lunch  break? 

CDC [MR.  COOMBS]:  Yes,  ma'am. 

ATC [CPT  von  ELTEN]:  Ma'am,  the  United  States  requests  a  two  hour 
lunch  break  in  order  to  mark  the  documents  for  the  next  round  of 
witnesses.  And  then  hopefully  can  get  stated  and  finish  with  the 
witnesses . 

MJ:  All  right.  Do  we  —  let's  see  12:20,  1:20,  2:20.  If  we 

start  at  2:00,  we  would  —  government  have  enough  time  to  do  what 
they  need  to  do  — 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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MJ:  At  1400?  Why  don't  we  do  that  then?  Court  is  in  recess 

until  1400. 

[The  court-martial  recessed  at  1220,  18  July  2013.] 

[The  court-martial  was  called  to  order  at  1424,  18  July  2013.] 

MJ:  The  Court  is  called  to  order.  Major  Fein? 

TC [MAJ  FEIN]:  Your  Honor,  all  parties  when  the  Court  last 
recess  are  again  present  with  the  following  exception;  Captain  Morrow 
is  absent.  Captain  Whyte  is  present.  Also,  Your  Honor,  Captain  von 
Elten  is  absent,  Captain  Overgaard  is  present. 

CDC [MR.  COOMBS]:  Your  Honor,  just  one  quick  alibi  on  the  641 

argument.  I  just  wanted  to  point  out  on  the  databases,  both  the 
CIDNE-I  and  - 

MJ:  Just  a  moment. 

[Pause] 

MJ:  Okay. 

CDC [MR.  COOMBS]:  On  the  CIDNE-I  and  CIDNE-A  database,  you 

have  testimony  from  witnesses  that  the  database  was  made  up  of 
multiple  tables.  SIGACTS  were  one  of  those  tables.  You  also  had 
counter  IED .  You  had  PSYOPS.  You  had  HUMINT  reports.  But  these 
were  other  tables  under  the  CIDNE-I  and  CIDNE-A  database.  So  it 
wasn't  made  —  the  database  itself  was  not  made  exclusively  of 
SIGACTS. 

MJ:  Who  was  that  witness?  Do  you  remember? 
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CDC [MR.  COOMBS]:  The  —  all  of  the  unit  witnesses  that 

testified  for  the  government,  so  all  the  unit  witnesses  talked  about 
the  other  things  on  the  CIDNE-I  or  CIDNE-A  database. 

MJ:  All  right.  Government,  do  you  contest  that? 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  doesn't  necessarily 
contest  that  the  CIDNE  system  had  other  types  of  information  in  it, 
which  — the  United  States  even  elicited  that  testimony,  but  was 
charged,  of  course,  under  the  CIDNE  database  —  what's  on  the  Charge 
Sheet  is  the  CIDNE  database  containing  a  certain  number  of  SIGACTS. 
The  focus,  of  course,  is  the  SIGACTS  side  of  the  database. 

[Pause] 

MJ:  All  right.  Before  we  proceed,  I  was  advised  over  the  lunch 

recess  that  at  an  earlier  proceeding  today  there  was  a  cell  phone  or 
other  digital  device  in  the  courtroom.  I  remind  the  public  once 
again  the  rules  of  Court  are  that  you  cannot  have  cell  phones  or 
digital  devices  in  the  courtroom.  We  have  not  had  an  issue  of  any 
kind  since  really  the  trial  began,  and  I  just  bring  it  to  your 
attention.  Please,  if  you  have  those,  keep  them  outside  of  the 
courtroom.  If  I  find  that  there's  continued  violations  of  rules  of 
Court,  I  may  have  to  increase  the  procedures  for  searches  and  all  of 
that  before  you  come  in  here,  and  I  really  don't  want  to  do  that.  So 
I  just  bring  that  to  your  attention.  Are  we  ready  to  proceed? 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

MJ:  Major  Fein? 

ATC [OPT  OVERGAARD] :  Ma'am,  Chief  Ehresman,  defense  witness  is 
being  recalled  to  continue  his  cross-examination. 

MJ:  So  you're  reopening  your  case;  is  that  right? 

ATC [CPT  OVERGAARD]:  Well,  it's  the  defense  case  technically. 

MJ:  Okay.  Go  ahead. 

CHIEF  WARRANT  TWO  JOSHUA  EHRESMAN,  U.S.  Army,  was  recalled  as  a 
witness  for  the  defense,  reminded  of  his  previously  sworn  and 
testified  as  follows: 

CROSS -EXAMINATON 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  Now,  you  last  testified  on  8  July  2010.  And  at  that  time 
you  testified  that  you  arrived  in  Iraq  in  November  of  2009,  is  that 
correct? 

A.  Yes,  ma'am. 

Q.  And  then  that  was  later  than  the  rest  of  2-10  because  of  — 
because  you  had  surgery? 

A.  Yes,  ma'am. 

Q.  So  you  didn't  have  the  opportunity  to  do  —  to  do  the  right 
seat/left  seat? 

A.  Yes,  ma'am. 

Q.  And  you  got  the  lay  of  the  land  when  you  got  in  theater  by 
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basically  talking  to  other  Soldiers  that  worked  around  you? 

A.  Yes,  ma'am. 

Q.  And  when  you  got  in  theater  you  discovered  that  there  was  a 
program  that  you  needed  to  run  on  your  computer  to  do  your  job,  is 
that  correct? 

A.  Yes,  ma'am. 

Q.  And  you  didn't  have  that  program  on  your  computer? 

A.  That's  correct. 

Q.  And  —  was  that  a  media  player? 

A.  Yes,  ma'am. 

Q.  And  everyone  else  in  the  S-2  shop  already  had  that  media 
player  installed  on  their  machines? 

A.  Yes,  ma'am. 

Q.  So  someone  in  the  S-2  shop  give  you  that  media  player  on  a 

disk? 

A.  Yes,  ma'am. 

Q.  And  you  tried  to  install  the  media  player,  but  you  weren't 
allowed  to  do  so? 

A.  Yes,  ma'am. 

Q.  And  you  explained  that  administrator  privileges  came  up 
when  you  tried  to  do  that? 

A.  Yes,  ma'am. 

Q.  And  then  someone  in  the  S-2  shop  told  you  that  you  could 
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run  the  program  from  a  disk? 

A.  Yes,  ma'am. 

Q.  And  you  just  —  you  couldn't  install  anything? 

A.  Correct,  ma'am. 

Q.  So  —  and  —  did  this  person  then  show  you  how  you  can  run 
this  program  from  a  disk? 

A.  Yes,  ma'am. 

Q.  And  then  after  that,  did  you  go  to  Mr.  Milliman  and  ask  him 
to  install  that  program  on  your  computer? 

A.  Yes,  ma'am. 

Q.  And  you  had  to  —  and  the  he  had  to  go  and  check  and  make 
sure  that  he  could  actually  installment  the  program  on  your  computer? 
A.  That's  correct. 

Q.  Okay.  And  he  said  he  would  get  back  to  you? 

A.  Yes,  ma'am. 

Q.  So  in  the  meantime  you  that  —  that  media  program  from  the 

disk? 

A.  Yes,  ma'am. 

Q.  And  you  had  a  shortcut  to  your  CD  player? 

A.  Yes,  ma'am. 

Q.  Because  it  was  faster  than  clicking  through  everything  on 
your  desktop? 

A.  Yes,  ma'am. 
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Q.  Okay.  So  then  a  few  days  later  Mr.  Milliman  came  back  to 

2 

you  and  installed  the  media  player  on  your  program  or  DCGS-A 

3 

computer? 

4 

A.  Yes,  ma'am. 

5 

Q.  And  after  that  you  did  not  have  to  access  any  programs  from 

6 

disks? 

7 

A.  That's  correct,  ma'am. 

8 

Q.  Because  everything  you  needed  was  already  on  your  computer? 

9 

A.  Yes,  ma'am. 

10 

Q.  And  you  testified  even  mIRC  Chat  was  on  your  computer  when 

11 

you  got  there? 

12 

A.  Yes,  ma'am. 

13 

Q.  And  you  don't  remember  anyone  else  running  programs  from 

14 

disks? 

15 

A.  No,  ma'am. 

16 

Q.  And  did  this  all  happen  soon  after  you  arrived  at  FOB 

17 

Hammer? 

18 

A.  Yes,  ma'am. 

19 

Q.  And  that  was  November  2009  time  period? 

20 

A.  Correct. 

21 

Q.  Now  when  you  spoke  to  Mr.  Milliman  about  the  media  player. 

22 

he  told  you  that  you  were  weren't  allowed  to  add  programs  to  DCGS-A 

23 

machines  because  they  didn't  belong  to  2-10,  is  that  correct? 
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A.  Yes,  ma'am. 

Q.  And  he  told  you  that  only  he  could  authorize  anything  on  to 
the  DCGS-A  machines? 

A.  That's  correct. 

Q.  So,  in  fact,  he  —  he  actually  told  you  he  didn't  even  want 
you  saving  files  on  your  desktop? 

A.  Yes,  ma'am. 

Q.  So  when  you  testified  before  on  8  July,  you  said  that  Mr. 
Mil liman  told  you  you  could  run  executables  on  a  CD.  Do  you  actually 
remember  Mr.  Milliman  telling  you  that? 

A.  No,  ma'am. 

Q.  In  fact,  you  —  no  one  ever  said  anything  about  executable 
because  until  in  Mr.  Coombs  explained  to  you  what  an  executable  was  a 
couple  of  months  ago  you  didn't  --  you  didn't  even  know  what  that 
term  meant,  is  that  correct? 

A.  That's  correct.  Yes,  ma'am. 

Q.  But  you  remember  hearing  that  you  were  able  to  run  anything 
from  a  disk  from  someone  in  the  S-2  shop? 

A.  Yes,  ma'am. 

Q.  And  you  assumed,  when  you  last  testified,  it  was  Mr. 
Milliman  because  you  went  to  Mr.  Milliman  with  all  of  your  DCGS-A 
questions  and  issues? 

A.  Yes,  ma'am. 
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Q.  But  you  don't  remember  who  actually  told  you,  if  anyone, 
that  you  could  actually  run  programs  from  that  CD? 

A.  That's  correct,  ma'am. 

Q.  And  it  was  actually  somebody  in  your  unit  that  set  that  up 
for  you  on  your  computer? 

A.  Yes,  ma'am. 

Q.  And  just  to  clear  up  any  confusion  from  your  testimony 
before  as  well,  you  last  testified  —  you  said  that  it  was  VLC  on  the 
CD? 

A.  Yes,  ma'am. 

Q.  But  you're  not  actually  sure  that  was  VLC,  right? 

MJ:  What  is  VLC? 

ATC [CPT  OVERGAARD] :  It's  - 

WIT:  It's  a  type  of  media  player,  ma'am. 

Q.  And  you're  not  —  but  you're  not  actually  sure  that  it  was 

VLC? 

A.  Not  one  hundred  percent,  no,  ma'am. 

Q.  You  just  —  you  know  it  was  a  media  player  of  some  sort? 

A.  Yes,  ma'am. 

Q.  So  to  summarize,  you're  sure  that  you  could  not  put 
anything  on  your  DCGS-A  computer  without  going  through  Mr.  Milliman? 
A.  Yes,  ma'am. 

Q.  And  you  remember  someone  in  the  S-2  shop  telling  you  that 
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you  could  run  —  that  you  could  physically  run  anything  off  a  disk 

A.  Yes. 

Q.  —  you  just  don't  remember  who  that  was? 

A.  Yes,  ma'am. 

Q.  And  was  there  ever  a  time  after  you  arrived  that  Mr. 
Milliman  pulled  everyone  in  the  shop  aside  just  to  ensure  that  they 
understood  that  no  one  was  allowed  to  add  anything  to  their  DCGS-A 
machines? 

A.  Yes,  he  did  do  that. 

Q.  And  do  you  remember  when  that  was? 

A.  January/February  timeframe,  ma'am. 

Q.  When  was  this?  Was  this  at  a  shift  change? 

A.  Yes,  ma'am. 

Q.  So  was  everyone  in  the  unit  present  at  that  time? 

A.  Everybody  in  the  shop  that  was  in  country  was  at  that  shift 
change . 

Q.  Did  that  include  PFC  Manning? 

A.  Yes,  ma'am. 

ATC [CPT  OVERGAARD] :  Thank  you. 

WIT:  Yes,  ma'am. 

[END  OF  PAGE] 
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DIRECT-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Chief  Ehresman,  let's  talk  what  about  you  know.  Do  you 
know  if  anyone  had  mlRC  chat  as  an  executable  file  on  their  desktop? 

A.  Yes,  sir. 

Q.  And  do  you  know  if  anyone  had  PFC  Manning  add  mlRC  chat  to 
their  computer? 

A.  Yes,  sir. 

Q.  So,  I  guess  that  would  be  an  example  of  somebody  other  than 
Milliman  adding  something  to  a  DCGS-A  computer? 

A.  Yes,  sir. 

Q.  And  when  you  were,  I  guess,  falling  in  on  the  brigade  a 
month  later  —  the  brigade  a  month  later,  you  indicated  that  your 
understanding  was  that  you  could  add  —  you  could  run  executable 
files  from  a  CD,  is  that  correct? 

A.  Yes,  sir. 

Q.  And  so,  let's  go  ahead  and  go  through  what  —  what  you  know 
from  the  S-2  side  of  the  house.  Did  anyone  in  the  S-2  section  say 
that  you  could  not  run  an  executable  file  from  a  CD? 

A.  No,  sir. 

Q.  Did  anyone  in  the  S-2  section  say  that  you  could  not  put  a 
shortcut  on  your  desktop  to  run  a  —  an  executable  file  from  a  CD? 

A.  No,  sir. 
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1  Q.  Did  anyone  in  the  S-2  section  say  that  you  could  not  put  an 

2  executable  file  on  the  desktop  and  run  it? 

3  A.  No,  sir. 

4  Q.  With  regards  to  Mr.  Milliman,  when  he  pulled  everyone  in 

5  this  group,  did,  he  at  that  point,  say  you  can't  put  games  and  music 

6  and  executable  files  on  your  desktop? 

7  A.  Yes,  sir. 

8  Q.  And  —  so  he  specifically  said  he  thought  you  could  not  do 

9  that  —  you  shouldn't  be  able  to  do  that? 

10  A.  Yes,  sir. 

11  Q.  And  do  you  know  if  others  Soldier  had  music  and  games  on 

12  their  DCGS-A  machines? 

13  A.  Yes,  sir. 

14  Q.  So  I  guess  Milliman  said  it,  and  Soldiers  didn't  follow 

15  what  Milliman  said? 

16  A.  Or  it  was  already  on  there. 

17  Q.  All  right.  Fair  enough.  And  if  —  with  regards  to 

18  Milliman,  he  wasn't  in  the  military,  correct? 

19  A.  No,  sir. 

20  Q.  He  was  the  civilian  person  contracted  to  work  on  the  DCGS-A 

21  machines? 

22  A.  He  was  one  —  one  of  them,  yes,  sir. 

23 
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q.  And  with  regards  to  the  military  chain  of  what  you  could 
and  could  not  do  on  DCGS-A  computer,  it  was  the  S-2  and  above  that 
kind  of  controlled  what  you  do? 

A.  Yes,  sir. 

q.  And  did  the  S-2  ever  put  out  —  and  I  know  Mr.  Milliman  had 
his  little  group  together,  but  did  the  S-2,  Captain  Lim  or  his 
predecessor.  Major  Clausen,  ever  get  everyone  together  and  say,  hey, 
no  more  games,  music,  movies  executable  files  on  you  DCGS-A  machines? 

A.  Not  until  after  Private  Manning  got  in  trouble. 

Q.  Okay,  so  after  Manning  got  in  trouble  that's  when  the  S-2 
actually  put  that  out? 

A.  Yes,  sir. 

Q.  And  prior  to  that? 

A.  No,  sir. 

RECROSS-EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  Did  you  ever  see  anyone  put  the  music  and  games  on  the  — 
in  the  DCGS  machines? 

A.  No,  ma'am. 

Q.  You  just  assumed  it  was  on  the  T-drive  already? 

A.  Yes,  ma'am. 

Q.  And,  again,  Mr.  Milliman  told  you  that  only  he  could 
authorize  adding  things  to  the  DCGS-A  machines,  correct? 


10553 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


Q  J 


A.  Yes,  ma'am. 

Q.  He  didn't  necessarily  say  I  must  do  it? 

A.  Right.  That's  correct. 

Q.  Okay.  And,  again,  defense  asked  you  again  about 
executables,  but  you  —  you  didn't  know  what  they  were,  did  you? 

A.  Not  at  that  time.  No,  ma'am. 

Q.  Or  self-executables? 

A.  Yes,  ma'am. 

Q.  Thank  you. 

MJ:  Go  ahead. 

REDIRECT  EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  The  term  executable,  is  that  what  you  didn't  understand? 

A.  Yes,  sir. 

Q.  You  understood  that  certain  things  could  be  double  clicked 
and  run  from  a  CD  or  from  a  desktop,  right? 

A.  Yes,  sir. 

Q.  So  that  was  knowledge  you  had,  you  just  didn't  know  about 
being  called  an  executable? 

A.  That's  correct. 

CDC [MR.  COOMBS]:  Thank  you. 
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EXAMINATION  BY  THE  COURT-MARTIAL 
Questions  by  the  Military  Judge: 

Q.  Talk  to  me  about  the  video  player.  Once  again,  what 
happened  when  you  first  got  into  the  country  —  the  media  player, 
excuse  me? 

A.  Yes,  ma'am.  The  media  player  I  was  using  —  'cause  there's  - 
-  there's  various  amounts  of  my  media  players.  And  some  will  play  on 
some  and  some  wouldn't  play  on  the  others  when  you're  trying  to  look 
at  a  file  or  a  movie.  Sometimes  you  need  a  specific  video  player  to 
watch  that  specific  video.  So  I  didn't  have  it  on  my  computer.  So 
it  was  given  to  me.  So  I  used  it  until  I  got  to  Mr.  Milliman,  and  he 
put  it  on  there. 

Q.  When  you  said  it  was  given  to  you.  How  was  it  given  to 

you? 

A.  On  a  CD,  ma'am. 

Q.  Okay. 

A.  And  then  after  I  —  I  had  problems  with  it  and  I  was  tired 
of  pulling  it  out  and  putting  in  another  one,  pulling  it  out,  you 
know,  back  and  forth  transitioning,  I  went  to  Mr.  Milliman  and  he 
corrected  it  for  me. 

Q.  So  at  the  time  you  were  using  the  media  player  —  when  you 
--  well,  when  you  subsequently  found  out  from  Mr.  Milliman  that  you 
weren't  supposed  to  use  files  or  software  from  a  CD,  did  you  know 
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that  when  you  were  using  - 

A.  No,  ma'am. 

Q.  -  the  media  player? 

A.  No,  ma'am. 

Q.  Were  other  Soldiers  in  the  SCIF  also  using  things  from  CDs 
like  the  media  player? 

A.  I  don't  know,  ma'am. 

MJ:  Any  follow-up  based  on  that? 

ATC [CPT  OVERGAARD] :  Yes,  ma'am. 

RECROSS-EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  You  don't  remember  anybody  else  running  programs  from 
disks,  do  you? 

A.  No,  ma'am. 

Q.  And  the  —  everyone  else  in  the  shop  besides  you  had  the 
program  that  you  were  running  from  the  disk  already  on  their 
computers,  correct? 

A.  Yes,  ma'am. 

ATC [CPT  OVERGAARD]:  Thank  you. 

CDC [MR.  COOMBS]:  Nothing,  Your  Honor. 

MJ:  I  have  one  other  one. 

EXAMINATION  BY  THE  COURT-MARTIAL 
Questions  by  the  Military  Judge : 
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Q.  Could  you  take  something  from  a  NIPR  computer  on  a  CD  and 
put  in  it  a  SIPR  computer  or  a  DCGS-A. 

A.  Yes,  ma'am. 

MJ:  Okay.  Thank  you.  Any  follow-up  based  on  that? 

CDC [MR.  COOMBS]:  No,  Your  Honor. 

ATC [CPT  OVERGAARD] :  No,  ma'am. 

MJ:  Temporarily  or  permanently  excusable. 

CDC [MR.  COOMBS]:  Temporary,  Your  Honor. 

[The  witness  was  temporarily  excused,  reminded  of  the  previous 
warning,  and  withdrew  from  the  courtroom.] 

CDC [MR.  COOMBS]:  We  would  ask  that  Chief  Ehresman  stay  for 

the  day.  The  only  reason  is  depending  upon  what  the  government 
elicits  in  its  rebuttal  case,  he  may  have  information  in  surrebuttal . 

MJ:  All  right.  Any  objection? 

TC [MAJ  FEIN]:  To  stay,  no.  Your  Honor. 

MJ:  Okay.  So. 

ATC [CPT  WHYTE]:  Ma'am,  the  United  States  recalls  Mr.  Jason 
Milliman. 
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JASON  MILLIMAN,  civilian,  was  recalled  as  a  witness  for  the 
prosecution,  was  reminded  of  his  previous  oath,  and  testified  as 
follows : 

DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Let's  talk  a  little  bit  about  the  use  of  CDs  on  the  DCGS 
machines.  What,  if  any,  physical  restrictions  were  in  place  that 
prevented  a  Soldier  from  putting  a  file  on  a  CD,  putting  the  CD  into 
the  DCGS  machine,  and  then  running  the  file  —  running  the  —  running 
the  file  from  the  CD? 

A.  No  visible  restrictions. 

Q.  Were  Soldiers  authorized  to  put  an  unauthorized  executable 
file  on  a  CD,  put  that  CD  in  the  DCGS  machine,  and  run  the 
unauthorized  executable  file? 

A.  No. 

Q.  Why  not? 

A.  Because  it  was  unauthorized. 

Q.  And  how  did  Soldiers  know  what  was  and  was  not  authorized? 

A.  They  would  come  to  me  first.  If  I  didn't  know  the  answer, 

I  would  he  seek  guidance  from  Camp  Slayer  whether  it  was  authorized 
or  not. 

Q.  And,  again,  what,  if  any,  physical  restrictions  were  in 
place  to  prevent  a  Soldier  from  putting  a  file  on  a  CD,  putting  a  CD 
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into  the  computer,  creating  a  shortcut  on  the  desktop,  and  then 
running  the  file  from  that  shortcut? 

A.  Still  no  physical  limitations. 

Q.  Were  Soldiers  authorized? 

MJ:  I'm  sorry? 

WIT:  Still  no  physical  limitations. 

Q.  Were  Soldiers  authorized  to  put  an  unauthorized  executable 
file  on  a  CD,  put  the  CD  in  the  DCGS  machine,  create  the  shortcut, 
and  run  the  un  —  and  run  the  unauthorized  executable  file  from  the 
shortcut? 

A.  No,  they  were  not  authorized  to  do  that. 

Q.  Would  you  have  authorized  a  Soldier  to  introduce  anything 
from  a  CD  onto  the  DCGS  machine  that  was  unauthorized? 

A.  No. 

Q.  What  about  using  a  CD  for  an  —  author  —  for  an  authorized 
executable  file,  was  that  something  —  like  mIRC  Chat,  for  instance, 
would  that  have  been  prohibited? 

A.  I  don't  know  that  it  would  be  prohibited,  but  it  would  have 
been  unnecessary  cause  if  it  were  authorized  and  it  were  needed,  I 
would  have  loaded  it. 

Q.  So  it  wasn't  common  for  Soldiers  to  use  a  CD  to  load  an 
executable  file? 

A.  Correct. 
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Q.  Because  that  would  already  have  been  on  the  computer? 

CDC [MR .  COOMBS]:  Leading. 

ATC [CPT  WHYTE]:  No  more  questions. 

MJ:  I  think  he  just  paraphrased  what  the  witness  said.  So, 

overruled. 

ATC [CPT  WHYTE]:  No  more  questions. 

MJ:  Cross? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

CROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Mr.  Milliman,  did  you  know  whether  or  not  Wget  was  part  of 
the  baseline  package  for  DCGS-A  computers? 

A.  I  don't  know. 

Q.  And  at  the  time  of  the  deployment  you  didn't  know  whether 
Wget  was  part  of  the  baseline  package? 

A.  If  it  were  a  part  of  baseline  package  then  four  years  ago  I 
probably  would  have  known,  but  I  don't  recall  that. 

Q.  Do  you  recall  testifying  at  the  Article  32  that  you  didn't 
know  whether  or  not  it  was  part  of  the  baseline  package? 

A.  Correct.  I  don't  remember  —  I  don't  recall  if  it  was  part 
of  the  baseline  package  or  not. 
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Q.  And,  in  fact,  at  Article  32,  you  testified  that  you  tried 
to  determine  whether  Wget  was  part  of  the  baseline  package  by  calling 
the  company  that  you  worked  for? 

A.  Correct. 

MJ:  Hold  on.  Yes  [speaking  to  the  Assistant  Trial  Counsel [CPT 

WHYTE] ? 

ATC [CPT  WHYTE]:  Ma'am,  it's  just  beyond  the  scope  of  the  direct. 

CDC [MR.  COOMBS]:  They  called  him,  ma'am,  to  testify  about 
executable  file.  Wget's  an  executable. 

MJ:  I'll  allow  it.  Go  ahead. 

Q.  So  do  you  recall  at  the  32  testifying  that  you  called  the 
company  to  try  to  determine  whether  or  not  Wget  was  part  of  the 
baseline  package? 

A.  Yes. 

Q.  And  they  told  you  basically  they  wouldn't  give  you  that 
information? 

A.  Correct. 

Q.  Now,  with  regards  to  installing  software;  if  you  wanted  to 
install  a  program  on  the  W  --  excuse  me,  on  the  DCGS-A  machine,  you 
had  to  have  admin'  privileges,  correct? 

A.  For  programs  like  mIRC  chat,  no.  For  programs  like  ArcGIS 
and  things  that  made  changes  to  system  files  —  operating  system 
files,  then  you  would  need  administrator  privileges. 
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Q.  So  your  testimony  is  that  you  could  add  mIRC  chat  as  a 
program  to  the  entire  computer  without  admin'  privileges? 

A.  Well,  as  I  think  we've  already  established  mIRC  chat  was  a 

—  one  of  those  type  of  executable  files  that  you  could  run  by 
itself. 

Q.  All  right.  So  —  yeah,  but  my  question  is;  if  you  wanted 
to  add  a  program  to  the  entire  computer  you  needed  to  have  admin 
privileges,  correct? 

A.  I  guess  the  problem  I  have  with  that  question  is  you  say, 
to  the  entire  computer.  It  either  is  able  to  run  on  a  computer  or  it 
isn't.  It's  not  like  there's  sections  of  a  computer.  But  - 

Q.  How  would  I  break  it  down?  Like  you  had  a  —  a  program  and 
wanted  every  user  to  log  on  to  that  computer  to  have  use  of  it,  you 
had  to  have  admin'  privileges  to  put  it  on  the  computer  in  that 
manner? 

A.  I  believe  so,  yes. 

Q.  And  that  would  be  you,  correct  --  that  you  would  be  the  one 
that  has  admin'  privileges? 

A.  Correct. 

Q.  And  you  talk  about  mIRC  chat  —  you  said  mIRC  chat  --  if  -- 
you  wouldn't  need  to  use  an  executable  file  because  you  were  going  to 
add  it  to  the  computer,  right? 
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A.  It  wouldn't  be  necessarily  on  a  regular  basis  because  if  it 
was  something  that  the  unit  needed  to  use  a  regular  basis  it  would 
have  been  identified,  and  I  would  have  installed  it.  The  only 
exception  to  that  policy  is  if  —  'cause  I  had  several  camps  to  take 
care  of  —  between  Zafar,  Herat,  Carver,  Slayer,  you  name  it.  So  if 
I  was  on  the  other  side  of  the  country  and  someone  —  for  some  reason 
mIRC  chat  died  and  needed  to  be  reinstalled,  I  would  probably 
authorized  them  to  go  ahead  and  install  from  it  their  shared  drive 
without  me  being  there. 

Q.  Okay,  but  when  you  install  stuff,  you  install  it  to  the 
programs  to  where  then  any  user  who  logged  onto  that  computer,  it  was 
one  of  the  programs  that  they  could  use? 

A.  Correct. 

Q.  You  didn't  install  stuff  as  executable  files  on  the 
computer,  right? 

A.  Correct. 

Q.  And,  when  you  installed  mIRC  chat,  you  installed  a  version 
of  mIRC  chat  that  was  approved? 

A.  Correct. 

Q.  Because  not  every  version  was  approved? 

A.  I  don't  know  that.  And  I  think  we  talked  about  that  in 
prior  testimony,  too.  I  don't  know  what  version  was  or  was  not 
authorized. 


10563 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


Q 


J 


Q.  But  do  you  know  that  software  that  is  approved  is  approved 
for  a  particular  version  because  we  want  to  make  sure  it  plays  nice 
with  everything  else  on  the  DCGS-A? 

A.  Correct. 

Q.  So  if  mIRC  chat  had  Version  11,  that  that  was  approved,  and 
two  months  later  Version  12  comes  out.  Version  12' s  not  authorized  on 
the  DCGS-A  computer,  right? 

A.  In  theory  it  would  not  have  been  unless  it  had  already  been 
vetted  by  the  folks  at  Slayer  and  giving  a  verbal  okay. 

Q.  So  absent  that,  the  answer  would  be,  no,  it  would  not  be 
permitted? 

A.  Correct. 

Q.  And  so  when  you're  —  we're  talking  about  somebody  adding 
mIRC  chat  as  a  desktop  executable,  when  the  computer  already  has  it, 
what  does  that  tell  you? 

A.  I'm  not  sure  I  follow. 

Q.  Well,  does  it  tell  you  they're  probably  adding  a  newer 
version  of  mIRC  chat? 

A.  I  don't  think  they  would  have  added  another  version  of  mIRC 
chat  if  they  already  had  a  version  on  there  to  use. 

Q.  And  that's  why  I  asked  the  guestion;  if  they  already  had  a 
mIRC  chat  on  there  to  use  and  now  they're  adding  something  as  an 
executable  file  as  mIRC  chat,  would  that  tell  you  that  their  —  they 
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might  be  adding  a  newer  version  of  it? 

A.  I  suppose  it's  not  outside  the  realm  of  possibly,  but  it 
seems  like  this  is  a  leading  what  if  kind  of  thing.  And  I  don't  - 

Q.  That's  exactly  what  it  is? 

A.  Yeah,  'cause  I  don’t  know  that  it  ever  happened,  so  I  can't 
really  testify  to  that. 

Q.  I  know.  But  I'm  —  what  I'm  asking  you  as  your  expertise 
in  computers,  if  somebody  has  a  particular  version  of  a  program  on 
their  computer,  and  then  they  add  another  version  as  a  desktop 
executable.  That  would  be  an  instance  where  it  might  be  a  newer 
version? 

A.  Or  it  could  have  been  an  older  version.  In  some  cases  some 
of  the  anti-virus  software  didn't  work  nice  with  newer  versions 
versus  older  versions.  So  it  could  have  just  been  an  older  version. 
We  don't  necessarily  know. 

Q.  All  right.  We'll  let's  —  let's  deal  with  your  experience. 
You  said  in  your  experience  you  were  aware  of  certain  officers  who 
always  want  to  have  the  latest  of  a  different  program  —  the  latest 
version? 

A.  Not  always,  no.  There  was  a  few  in  the  beginning,  but  it 
wasn't  a  frequent  occurrence,  no. 

Q.  Okay,  well,  then  the  few  in  the  beginning  —  there  are 
instances  where  somebody  wanted  a  newer  version  of  a  program,  right? 
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A.  I  don't  know  it  was  a  newer  version  of  a  program,  but  it 
was  a  program  that  was  not  already  on  the  baseline  from  DCGS-A. 

Q.  Okay,  and  they  wanted  to  add  certain  things,  and  then 
that's  when  you  would  say,  no,  you  can't  do  that? 

A.  Correct. 

Q.  And  one  of  those,  I  believe,  involved  a  Soldier  that 
well,  actually  before  I  get  there,  with  regards  to  executable  files 
on  the  desktop,  the  government  talked  to  another  witness  about  a 
meeting  that  you  had  where  you  called  everyone  in  and  you  told  them 
what  they  could  and  could  not  do  in  January/February  timeframe.  Do 
you  recall  that? 

A.  I  don't  recall  a  specific  meeting  in  the  January/February  - 

-  any  specific  timeframe,  but  I  know  during  the  RIP/TOA,  the 
changeover  from  one  to  the  other,  when  the  new  unit  came  in,  I  made 
myself  available  to  both  shifts  when  they  had  shift  change.  So  it 
was  the  prior  unit,  the  incoming  unit;  both  day  and  night  shift,  so 
there  were  literally  75  to  100  people  in  the  room  probably  where  we 
went  over  this  is  the  DCGS-A  system,  this  is  your  DCGS— A  support  guy 

—  they  pointed  to  me,  any  questions  you  have  you  go  to  him.  You  can 
and  can't  do  this,  so  and  so  forth. 

Q.  Okay.  When  —  and  you  said  RIP/TOA;  is  that  when  you 
recall  doing  this? 
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A.  I  also  --  I  was  going  to  say,  I  also  did  it  when  I  --  when 
the  new  unit  comes  in  the  brand  new  DCGS-M  then  goes  on  the  machine. 
So  when  I  put  the  M's  on  the  machines  at  the  user's  station,  I  talked 
with  the  users  at  that  station  and  let  them  know  the  same  thing. 

Q.  Yeah,  but  I'm  just  talking  about  a  meeting  where  you  would 
have  had  both  the  day  and  night  shift,  you  know,  the  75  or  so  people 
you  just  testified  about,  one  area  you  say  you're  —  what  you  can  and 
can't  do? 

A.  Correct. 

Q.  When  do  you  recall  doing  that? 

A.  It  was  shortly  after  the  unit  got  there. 

Q.  And  when  was  that? 

A.  I  think  it  was  like  October/November  timeframe.  I  don't 
remember  when  they  actually  got  there. 

Q.  All  right.  And  so  when  you  recall  doing  that,  what 
precipitated  you  to  do  that? 

A.  Commonsense.  I  mean,  they  needed  to  know  what  was  there 
and  what  needed  to  be  —  what  they  were  authorized  to  and  not  to  do. 

Q.  Now,  with  regards  to  seeing  —  you  said  —  you  testified 
earlier  that  you  saw  games  and  music  and  stuff  on  the  DCGS-A 
computer,  right? 

A.  I  saw  music.  I  didn't  see  any  games  on  the  DCGS-A  laptops. 
I  know  there  were  games  on  share  drives  at  places,  but  I  never  saw 
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games  on  the  DCGS-A  laptop. 

Q.  All  right,  so  we'll  stick  with  what  you  recall;  music  - 

A.  Yes. 

Q.  -  you  said  music? 

A.  Yes. 

Q.  And  my  understanding  is  music  then  —  in  this  big  meeting 
you  wouldn't  allow  music  on  the  DCGS-A  machine,  right? 

A.  I  didn't  like  it,  but  I  had  no  authority  to  tell  them  to 
take  it  off.  I  mean,  the  computers  belong  to  the  units  specifically 
as  far  as  ownership.  What  they  wanted  to  use  the  computer  for  of  was 
outside  of  my  authority.  I  worked  for  the  unit.  I  could  tell  them 
what  the  project  authorized  and  didn't  authorize.  And  if  they 
violated  those  terms  then  in  theory  it  would  violate  their  warranty 
and  support  for  that  project. 

Q.  Okay,  so  if  I'm  understanding  you  correctly,  then  if  you 
saw  music  you  could  say,  you  know,  I  don't  know  like  that,  but  I 
can't  force  you  to  take  it  off? 

A.  Correct. 

Q.  If  you  saw  executable  files  that  were  not  part  of  the 
baseline  package,  was  that  true  for  that  as  well  where  you  could  say 
I  don't  like  it,  but  I  can't  make  take  it  off? 

A.  The  —  the  determining  factor  according  to  Camp  Slayer  was 
that  if  the  programs  loaded  onto  a  laptop  that  were  not  part  of  the 
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DCGS-A  baseline,  if  they  were  unknown  to  work  or  not,  we  could  try  it 
out.  If  it  interfered  with  the  system  software  say  —  for  instance, 
ARC-GIS  or  analyst  notebook  and  these  other  programs,  if  it  damaged 
those  programs'  ability  to  operate,  then  they  had  to  come  out.  But 
if  it  didn't,  we  would  allow  it.  But  it  was  very,  very  rare  that 
anything  like  that  ever  came  up.  So  the  end  result  was;  if  they  had 
something  that  wasn't  a  part  of  the  baseline,  but  it  was  allowed  — 
authorized,  then  it  was  okay.  I  mean,  whether  I  liked  it  or  not. 

Q.  Okay,  so  I  just  want  to  make  sure  I  understand  it  then.  If 
I'm  an  intel  analyst  and  I'm  working  in  the  shop  and  you  come  up  to 
me  and  I  say,  you  know  what,  I've  got  this  executable  file  that  — 
that  I  like,  it's  not  part  of  the  baseline  package,  I  like  it  —  it 
helps  me  do  my  job  or,  you  know,  I  think  it's  —  it's  a  good  baseline 
—  it's  a  good  executable  and  I  put  it  on  my  desktop.  You  see  me  do 
that.  You're  not  happy  with  that,  but  I  say  it  plays  nice  with  all 
of  the  other  programs,  can  you  make  me  take  it  off? 

A.  Yes.  In  that  case,  yes,  because  there  was  no  prior 
coordination  with  Camp  Slayer  to  see  if  it  would  be  allowed  to  be  put 
on.  So  if  it  —  if  that  happened,  my  direction  from  Camp  Slayer  was 
to  immediately  reimage  the  machine. 

Q.  All  right,  so  - 

A.  If  I  were  to  —  if  I  were  to  notice  anything  like  that 
happening,  my  initial  action  is  to  reimage  the  machine  immediately. 
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Q.  Now  music;  why  was  it  the  same  reaction? 

A.  Because  that's  not  a  program  that  makes  changes  to  system 
files  and  so  on. 

Q.  So  in  your  mind  there  was  a  difference  between  music.  How 
about  games? 

A.  Games  would  —  I  —  games  would  have  been  treated  the  same 
way,  I  believe,  as  far  as  reimaging  the  machine. 

Q.  So  if  you  saw  games  on  a  --  on  a  DCGS-A  machine,  and  you 
tell  them  to  take  it  off  and  if  they  didn't,  you  would  try  —  you 
would  say  I  want  the  machine  then?  I'm  going  to  reimage  it. 

A.  I  would  —  I  would  —  I  would  notify  the  NCO  in  charge  of 
that  person.  If  it  wasn't  an  NCO,  then  whoever  the  supervisor  was  — 
and  contact  slayer,  let  them  know  what  happened,  and  it  would  be 
reimaged  almost  immediately. 

Q.  And  did  you  ever  do  that? 

A.  I  do  not  recall  any  instance  of  that  that  needed  to  be 

done . 

Q.  So  you  don't  recall  any  instances  where  you  saw  somebody 
with  games  on  their  DCGS-A  machine? 

A.  Correct. 

Q.  Were  you  looking  for  that? 

A.  I  wasn't  going  to  each  person  every  day  to  see  if  they  had 
games  on  their  machine.  But  when  I  went  to  their  machines  to  do 
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updates,  if  they  had  problems  I  would  see  what  that  had  on  the 
machine  because  I  would  need  to  check  out  their  profile.  And  if  they 
—  for  instance,  if  their  machine  had  crashed  —  if  they  required  a 
reimage,  I  would  look  in  their  profile  and  see  what  data  they  and  ask 
them  what  they  wanted  me  to  save.  I  would  pull  their  data  off.  So 
if  they  had  something  like  games  I  would  have  seen  it. 

Q.  And  you  don't  recall  ever  seeing  that? 

A.  No. 

Q.  Would  it  surprise  you  that  games  were  on  analysts' 
computers? 

A.  No.  Knowing  human  nature  it  wouldn't  surprise  me  at  all. 

Q.  And,  yet,  you  —  it  wouldn't  surprise  you,  but  you  didn't 

see  it  at  all  during  the  time  you  were  there? 

A.  I  didn't  see  it,  no. 

Q.  Now,  you  did  report  an  incident  that  involved  XP  Lite, 
correct?  Another  executable  - 

MJ:  XP? 

CDC [MR.  COOMBS]:  XP  Lite. 

MJ:  Lie  or  Lite? 

CDC [MR .  COOMBS]:  Lite.  L-I-T-E,  ma'am. 

A.  That  name  sounds  familiar.  I'm  not  sure  --  I  mentioned  a 
program  to  prosecuting  attorneys  that  —  I  didn't  remember  what  the 
name  was,  but  there  was  some  program  they  liked  that  would  condense 
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PowerPoint  programs.  If  that's  that  program,  then  I  remember  it. 

2 

But  I  don't  remember  a  name  specifically. 

3 

Q.  All  right.  And  do  you  remember  ever  going  essentially  to 

4 

the  S-6  because  they  added  that  program  to  the  DCGS-A  machine  over 

5 

your  authorization? 

6 

A.  There  was  a  program  --  I  think  I  mentioned  this  earlier  -- 

7 

that  they  had  cracked  my  password  in  order  to  install.  That  may  have 

8 

been  that  software,  but  I  don't  recall  what  the  name  of  the  software 

9 

was . 

10 

Q.  And  when  you  took  that  to  the  S-6,  what  happened  after  you 

11 

said,  hey,  you  cracked  my  password,  you  added  this  program,  what 

12 

happened  after  that? 

13 

A.  I  had  to  reimage  the  machine  because  one  of  things  —  one 

14 

of  the  steps  they  took  was  to  delete  the  administrator  account  from 

15 

the  machine,  which  is  a  required  account  for  me  to  do  my  job,  so  I 

16 

had  to  reimagine  the  machine,  which  reinstalled  the  administrator 

17 

account,  and  put  those  back  the  way  they  were  before  S-6  got  a  hold 

18 

of  it . 

19 

Q.  Okay.  Now  with  regards  to  executable  programs;  they  can  be 

20 

from  a  CD,  is  that  right? 

21 

A.  Yes. 

22 

Q.  And  they  can  be  run  if  you  take  the  contents  of  a  CD  and 

23 

you  put  on  the  desktop,  then  you  can  run  an  executable  from  the 
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desktop,  is  that  correct? 

A.  Yes,  sir. 

Q.  And  if  you  want  to  keep  it  on  the  CD  and  you  want  to  create 
a  shortcut,  you  can  create  a  shortcut  on  your  desktop  to  run  it  from 
the  CD? 

A.  Yes,  sir. 

Q.  Those  are  the  three  ways  that  essentially  an  executable  -- 
an  executable  program  can  be  run? 

A.  Correct. 

Q.  With  regards  to  executables,  when  you  had  that  meeting  of, 

you  know,  what  you  could  and  could  not  do,  do  you  recall  referencing 

executable  files? 

A.  No,  I  don't. 

CDC [MR .  COOMBS]:  Thank  you. 

MJ:  Does  that  mean  you  don't  recall  or  you  didn't  reference 

them? 

WIT:  I  don't  —  I  don't  recall  referencing. 

MJ:  Anything  further  from  the  government. 

ATC [CPT  WHYTE]:  One  second,  please.  Your  Honor. 

MJ:  Yeah. 

[Pause] 

ATC [CPT  WHYTE]:  Nothing  further,  ma'am. 
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EXAMINATION  BY  THE  COURT-MARTIAL 
Questions  by  the  Military  Judge: 

Q.  Could  games  be  run  from  CDs? 

A.  I  suppose  they  could,  ma'am. 

Q.  If  they  were,  would  you  see  them  when  you  looked  at  the 
machine? 

A.  No.  If  —  if  it  was  contained  on  a  CD,  like  if  you'd  put 
a,  you  know,  a  music  CD  in  your  machine  and  then  took  it  out  later  if 
I  came  to  your  machine,  I  couldn't  tell  you'd  played  it. 

Q.  If  there  were  shortcuts  for  CD  programs  or  games,  for 
example,  on  a  machine,  when  you  were  looking  at  the  machine  to  fix 
problems  would  you  see  the  shortcut? 

A.  I  would  see  a  shortcut.  But  if  —  for  instance,  if  they 
named  it  "Work",  but  it  was  their  games  and  they  knew  it  was  games, 
all  I  would  see  is  a  shortcut  that  said  "Work". 

Q.  Are  music  CDs  executable  files? 

A.  I  don't  really  know  the  answer  to  that,  ma'am.  In  a  —  in 
a  general  sense  I  would  say  not  really,  no. 

Q.  How  about  movies? 

A.  I  would  say,  yeah,  probably. 

MJ:  Any  follow-up  based  on  that? 

ATC [CPT  WHYTE]:  Just  have  one  second. 

[Pause] 
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MJ:  While  the  government  is  conversing,  I  have  one  final 

question. 

Questions  continued  by  the  military  judge: 

Q.  If  movies  are  executable  files  —  or  music  are  executable 
file,  do  they  require  a  media  player  to  play  them? 

A.  Movies  definitely  would,  I  guess,  depending  on  the  music 
yeah,  I  think  they  would  both  require  a  media  player. 

Q.  Was  --  were  media  players  authorized  for  the  DCGS-A 
computers? 

A.  I  know  I  used  —  there  was  a  version  of  the  media  player 
while  I  was  at  Camp  Slayer  —  not  on  the  DCGS-A  laptops.  We  used  — 
I  think  it  was  VLC.  I  don't  remember  if  the  DCGS-A  baseline  had 
Windows  Media  Player,  or  VLC,  or  both,  or  neither.  I  don't  remember 
—  but  I'm  —  I'm  99  percent  sure  there  was  a  media  player  because  I 
know  that  the  analysts  had  to  have  the  ability  to  analyze  and  review 
videos  and  audio  clips.  So  I  —  I  don't  remember  which  media  player 
they,  but  I  know  they  had  something. 

Q.  So  if  —  this  is  —  if  the  DCGS-A  computer  had  a  media 
player  that  could  play  music  and  movies,  why  would  they  prohibit  it 
on  the  DCGS-A  computer? 

A.  I'm  not  sure  I  follow  you. 

Q.  Maybe  I  misunderstood  your  testimony.  I  thought  your 
testimony  earlier  was  that  you  couldn't  have  music  or  games  well. 
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I  guess  games  —  games  don't  require  a  media  player,  do  they? 

A.  No,  I  don't  think  so.  I  guess  —  see  it's  kind  of  a  gray 
area,  at  least  to  me.  I  mean,  I  guess  I'm  not  as  in  tune  as  some  of 
the  other  co-called  experts,  but  for  music  and  movies,  I  guess,  they 
are  —  in  a  means,  you  have  executable  for  them  to  run,  but  I  think 
when  we  refer  to  executable  here,  we're  talking  about  a  self- 
contained  program  that  performs  some  sort  of  either  data  manipulation 
or  editing  of  files.  So  since  a  music  file  doesn't  perform  data 
manipulation  or  edit  a  file  and  either  does  a  movie,  I  don't  think 
those  are  classified  as  the  same  like,  for  instance,  a  mIRC  chat  — 
mIRC  chat  will  store  and  save  chat  history  between,  say,  Camp  Slayer 
and  Camp  Balad,  for  instance,  it'll  save  a  chat  history  so  you  can  go 
back  and  look  at  stuff.  And  so  —  in  that  instance  I  would  call  mIRC 
chat  an  executable,  but  I  wouldn't  really  classify  music  or  movies  as 
that  type  of  executable,  if  that  makes  sense. 

MJ:  Okay.  Any  follow-up  based  on  that? 

[Pause] 

MJ:  Okay,  while  they're  talking  I'll  ask  you  one  more. 

Q.  What  was  the  purpose  of  not  allowing  music  and  movies? 

A.  Once  again,  the  music  and  movies  stuff,  we  couldn't 
disallow.  That  wouldn't  void  the  service  contract,  because  once  again 
it  doesn't  create  any  data  manipulation  or  editing  of  files,  so  it 
wouldn't  interfere  with  DCGS-A  —  other  programs  like  ArcGIS  or  so 
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forth.  But  other  programs  that  were  on  so-called  executable  that 
would  make  file  changes  —  some  system  file  changes,  those  type  of 
executables  had  to  be  vetted  through  Camp  Slayer  for  authorization  to 
put  on  the  machine.  Because  if  they  interfered  with  those  mission 
essential  programs  they  couldn't  be  allowed  on  the  machine. 

Q.  Could  games  interfere  with  those  programs? 

A.  I  think  games  would.  Because  games,  again,  store  file 
information  and  use  system  files. 

Q.  Well,  my  understanding  of  your  testimony  to  be  that  music 
and  movies  were  not  in  violation  of  DCGS— A  computer  rules  but  games 
were? 

A.  I  believe  that  to  be  correct.  Again,  it's  not  —  it  wasn't 

liked,  it  wasn't  preferred,  it  wasn't  condoned,  but  when  it  got  right 
to  the  brass  tacks  —  the  company  I  work  for  —  we  worked  for  the 
military  —  it  was  up  to  the  command  to  decide  what  they  would  or 
would  not  allow  on  a  machine  as  long  as  it  didn't  interfere  with  the 
mission.  So  while  we  may  not  have  liked  whether  if  they  played 
movies  or  music,  we  couldn't  prohibit  them  from  playing  movies  or 
music. 

MJ:  Any  follow-up  based  on  that. 

ATC [CPT  WHYTE]:  Just  a  few,  ma'am. 

M J :  Go  ahead. 
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REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  WHYTE] : 

Q.  Mr.  Milliman,  was  the  T-drive  unique  to  the  DCGS  machines? 
A.  No.  The  T-drive  was  the  unit's  shared  drive. 

Q.  Okay,  so  people  that  were  not  on  DCGS-A  machine  could  put 

information  on  the  T-drive? 

A.  Correct. 

Q.  Did  a  Soldier  ever  ask  you  to  put  on  Wget  on  their 
computers? 

A.  I  don't  recall  any  Soldier  ever  asking  me  for  Wget. 

Q.  Have  you  heard  of  Wget  before  this  court-martial? 

A.  I  don't  recall  ever  hearing  that  until  this  came  about. 

ATC [CPT  WHYTE]:  Nothing  further.  Your  Honor. 

MJ:  Defense? 

CDC [MR.  COOMBS]:  Nothing,  ma'am. 

MJ:  Temporary  or  permanent. 

ATC [CPT  WHYTE]:  Temporary. 

[The  witness  was  temporarily  excused,  duly  warned,  and  withdrew  from 
the  courtroom . ] 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  calls  Special  Agent 
David  Shaver  —  recalls. 

ADC [CPT  TOOMAN] :  Your  Honor,  before  the  witness  comes  out,  the 
defense  would  like  to  address  an  issue  with  the  Court. 
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MJ:  All  right.  Go  ahead. 

ADC[CPT  TOOMAN] :  Your  Honor,  one  of  the  rationales  provided  by 
the  government  —  I'll  just  read  it  verbatim  so  I  don't  misrepresent 
anything  here.  [Reading  from  a  document]  the  United  States  will 
recall  Special  Agent  Shaver  to  discuss  how  Wget  was  run  from  the 
accused's  profile  on  his  SIPRNET  computer  to  counteract  the  testimony 
of  CW2  Ehresman  that  executable  files  can  be  run  off  of  a  disk.  It's 
the  defense's  position  that  Chief  Ehresman  never  testified  about  Wget 
or  how  it  was  run  by  the  accused.  We  believe  the  testimony  was 
Chief  Ehresman  was  questioned  by  Major  Fein;  do  you  know  what  Wget 
is?  No.  You  don't  know  what  Wget  is?  I  don't.  So  you  don't  know 
if  he,  assuming  my  client  here,  was  good  or  bad  at  using  Wget?  No, 
sir.  Was  Wget,  to  the  best  of  your  memory,  one  of  those  DCGS  tools 
that  the  Army  provided  for  you  to  do  intel?  I  don't  know  what  Wget 
it  is,  sir.  It's  defense's  position  that  Chief  Ehresman  never 
testified  about  Wget.  To  the  extent  that  Chief  Ehresman  talked  about 
executable  files  and  how  they're  run,  he's  been  consistent  on  that. 

He  said  there  were  a  couple  of  ways  you  could  to  do  it.  You  could 
run  it  off  the  disk.  You  can  could  put  it  —  you  could  take  it  from 
a  disk  and  put  on  it  onto  your  profile.  It's  the  defense's  position 
that  Special  Agent  Shaver  will  say  the  exact  same  thing  just  as  Mr. 
Milliman  said  the  same  thing;  when  you  have  a  executable  file,  you 
can  run  it  from  the  CD,  you  can  take  it  off  of  a  CD  and  put  it,  you 
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know,  onto  your  desktop  or  your  user  profile,  and  those  are  the  only 
ways  you  can  run  it.  A  third  was  referenced  where  you  create  a 
shortcut,  and  that's  essentially  still  running  it  off  the  CD.  That’s 
what  Special  Agent  Shaver  will  say  as  well.  So  as  far  as  the 
government  wanting  to  talk  about  Wget,  we  don’t  feel  it’s  proper 
rebuttal.  Chief  Ehresman  clearly  didn't  talk  about  it;  said  I  don't 
know  what  it  is.  Special  Agent  Shaver  isn't  going  to  rebut  anything 
Chief  Ehresman  said  with  respect  to  how  executable  files  are  run 
because  he'll  say  they  were  —  will  echo  what  Chief  Ehresman  said  and 
what  Mr.  Milliman  said  here  today. 

MJ:  Government? 

TC [MAJ  FEIN]:  May  I  have  a  moment.  Your  Honor? 

[Pause] 

ATC [CPT  OVERGAARD] :  Ma'am,  in  the  government's  filing  and  as  was 
litigated  yesterday,  the  United  States  is  recalling  Special  Agent 
Shaver  to  show  how  Wget  was  run  from  the  accused  profile  on  a  SIPRNET 
computer  to  counteract  the  testimony  of  Chief  Ehresman  about  the 
about  executable  files  in  general  that  could  be  run  off  the  disk. 
There  has  —  there's  been  some  confusion  about  how  - 

MJ:  Now,  did  —  well  you're  recalling  Special  —  Special  Agent 

Shaver  to  talk  about  where  Wget  was  forensically  on  PFC  Manning's 
computer,  is  that  correct? 

ATC [CPT  OVERGAARD]:  Yes,  ma'am;  how  it  was  run  forensically  on 
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PFC  Manning's  computer. 

MJ:  Chief  Ehresman  testified  about  where  Wget  was  on  PFC 

Manning's  computer? 

ATC [CPT  OVERGAARD] :  No,  ma'am.  He  testified  about  how  how 
executable  files  could  be  run  off  of  a  disk.  So  the  government 
believes  that  —  on  the  DCGS-A  computer.  And  a  Ehresman  —  Chief 
Ehresman  and  Mr.  Milliman  are  not  computer  experts;  they  haven't  been 
called  by  —  as  computer  experts.  So  the  government  believes  that  — 
someone  is  necessary  to  come  in  to  actually  explain  the  confusion  and 
--  and  explain  to  the  Court  how  this  program  was  run,  and  how  it  was 
run  in  this  case,  and  how  executables  files  are  run  because  Chief 
Ehresman  even  said  he  wasn’t  sure  it  was  executable.  Mr.  Milliman 
said,  I  think  it  is,  but  he  wasn't  sure  either,  and  he's  not  a 
computer  expert  either,  ma'am. 

MJ:  All,  Captain  Tooman,  I  understand.  I'm  going  to  allow  it 

because  I'm  a  little  bit  confused  now  as  the  fact-finder.  And  I  can 
also  ask  for  witness  here  under  R.C.M.  913(c) (f) .  So  I'm  going  to 
allow  Special  Agent  Shaver  to  testify. 

ADC [CPT  TOOMAN]:  Your  Honor,  we  would  --  I  guess  we  would  just 
say  that  certainly  Agent  Shaver  could  rebut  the  testimony  of  Chief 
Ehresman  about  how  executable  files  are  run,  but  there's  no 
there's  nothing  to  rebut  with  respect  to  how  Wget  was  run  by  PFC 
Manning  since  the  defense  has  put  on  no  evidence  about  Wget. 
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MJ:  Well,  like  I  said.  I'm  going  to  allow  it  anyway  because  I'm 

going  —  I'm  confused  on  that  issue.  And  I  think  this  witness  can 
provide  some  clarity.  Go  ahead. 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  recalls  special  Agent 
David  Shaver. 

SPECIAL  AGENT  DAVID  SHAVER,  U.S.  ARMY,  was  recalled  as  a  witness  for 
the  prosecution,  was  reminded  of  his  previous  oath,  and  testified  as 
follows : 

DIRECT  EXAMINATION 

Questions  by  the  trial  counsel  [MAJ  FEIN] : 

TC [MAJ  FEIN]:  Before  we  proceed  I'm  going  to  grab  some  exhibits 
before  the  [retrieving  exhibits  from  the  court  reporter] . 

MJ:  They've  all  been  marked,  right? 

TC [MAJ  FEIN]:  They  have.  Your  Honor. 

MJ:  Yes  [speaking  to  the  defense]? 

ADC [CPT  TOOMAN] :  Ma'am,  we'll  object  to  —  we  believe  that  the 
government's  going  use  some  sort  of  PowerPoint  presentation.  We've 
not  been  provided  with  that  in  advance  of  Special  Agent  Shaver's 
testimony. 

MJ:  Has  the  defense  seen  the  PowerPoint? 

TC [MAJ  FEIN]:  No,  ma'am,  it's  a  demonstrative  exhibit  that 
we're  going  to  lay  a  foundation  for  just  like  the  defense  did  with 
Mr.  Hall  --  that  he  created  himself  and  that  he's  going  to  go  through 
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it.  And  then  —  we  can  provide  them  a  copy  right  now  and  take  a 
recess  if  they'd  like. 

MJ:  Do  you  want  to  do  that? 

ADC [CPT  TOOMAN] :  If  I  could  just  take  a  quick  look  at  it. 

Ma'am,  if  we  can  take  a  recess  and  make  a  copy  of  this? 

MJ:  How  much  time  would  you  like? 

ADC [CPT  TOOMAN]:  15  minutes.  Your  Honor. 

MJ:  All  right.  Any  objection? 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  All  right.  Once  again.  Special  Agent  Shaver,  same  rules 

apply.  The  court's  in  recess  for  15  minutes. 

[The  court-martial  recessed  at  1511,  18  July  2013.] 

[The  court-martial  was  called  to  order  at  1537,  18  July  2013.] 

[The  witness  was  on  the  witness  stand. ] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  court  last  recessed  are  again  present  in 
court . 

I  just  held  a  R.C.M.  802  session  with  counsel  prior  to 
coming  in.  And  Captain  Tooman  advised  me  that  the  defense  had 
several  objections  to  the  upcoming  testimony.  Do  we  need  to  excuse 
the  witness  while  we  present  them  for  the  record? 

ADC [CPT  TOOMAN]:  I  don't  think  so,  Your  Honor. 

MJ:  All  right.  Please  do  that. 
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1  ADC[CPT  TOOMAN] :  Your  Honor,  the  defense  objects  to  eliciting 

2  any  testimony  from  Agent  Shaver  about  how  Wget  specifically  is  run. 

3  We  understand  the  Court  seeks  clarification  as  to  how  Wget  actually 

4  got  on  PFC  Manning's  computer,  but  we  don't  believe  that  would  be 

5  proper  to  get  into  how  Wget  actually  runs  once  it's  on  PFC  Manning 

6  computer  with  Agent  Shaver  because  we  didn't  elicit  any  testimony  to 

7  that  during  our  case  in  chief. 

8  We  would  also  object  to  the  forth  slide,  which  is  a  command 

9  prompt,  which  includes  PFC  Manning's  name.  Our  objection  there  would 

10  be  this  isn't  a  command  prompt  that  was  found  forensically ,  so  it 

11  would  be  confusing  as  to  whether  or  not  this  is  actual  evidence  of 

12  what  PFC  Manning  did  --  and  it’s  not  evidence  to  what  PFC  Manning  may 

13  have  done.  So  we  would  just  ask  that  his  not  be  used  with  respect  to 

14  this  demonstrative  evidence. 

15  MJ:  All  right.  Government? 

16  TC [MAJ  FEIN]:  Ma'am,  for  the  first  point,  the  United  States 

17  originally,  based  on  Chief  Ehresman,  believes  that  there's  an 

18  inference  that  the  program  Wget  or  another  executable  was 

19  specifically  Wget  could  be  run  from  a  CD.  And  to  truly  understand 

20  whether  that  is  what  happened  in  this  case  under  these  circumstances 

21  of  where  the  program  was  run,  it's  best  for  the  Court,  the  trier-of- 

22  fact,  to  understand  how  Wget  works  —  for  Special  Agent  Shaver's 

23  ultimate,  I  guess,  opinion  really  on  —  on  whether  that  is  what 
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occurred  or  not. 

To  the  second  point.  Your  Honor,  the  fourth  slide,  the 
United  States  does  not  intend  to  use  —  well,  this  whole  slide  show's 
demonstrative  overall,  especially  Agent  Shaver  created  every  piece  of 
this  slide  show  including  that  command  prompt,  and  in  the  actual 
direct,  the  United  States  intends  to  elicit  that  from  Special  Agent 
Shaver  where  he  is  not  saying  this  is  actually  what  PFC  Manning  had 
on  his  computer,  but  he  replicated  it  in  order  to  aid  him  in  his 
testimony. 

MJ:  All  right.  Yes  [speaking  to  the  defense]? 

ADC [CPT  TOOMAN] :  Your  Honor,  if  I  may  —  just  just  to 
clarify.  Chief  Ehresman  testified  —  he  did  testify  that  an 
executable  could  be  run  from  a  CD,  but  he  also  testified  that  an 
executable  can  be  run  by  taking  that  file  off  file  and  placing  it  off 
—  placing  it  on  the  user  profile  and  running  from  it  there.  So  we 
don't  believe  we've  put  forward  any  evidence  that  PFC  Manning  did  it 
one  way  or  the  other.  These  are  the  ways  it  could  happen,  and  we 
believe  that  Agent  Shaver  would  echo  as  the  ways  that  it  could 
happen.  So  just  don't  feel  there's  anything  to  rebut. 

MJ:  All  right.  Well,  I've  already  ruled  on  this  earlier  and 
I'm  going  to  rule  on  —  I'm  going  to  adhere  to  my  original  ruling.  I 
am  going  to  allow  this  in.  And  I  certainly  understand  this  is  a 
demonstrative  exhibit,  and  I  certainty  won't  use  for  it  anything 
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else.  Go  ahead. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

[The  witness  was  reminded  of  his  previous  oath.] 

Q.  In  preparation  for  your  testimony  about  Wget  and  how  it 
works  and  where  it  was  found  on  PFC  Manning's  computer,  did  you 
prepare  a  demonstrative  exhibit  to  aid  you  in  your  testimony? 

A.  I  did. 

TC [MAJ  FEIN]:  Your  Honor,  I'm  handing  Special  Agent  Shaver 
Prosecution  Exhibit  187  for  identification  [handing  the  document  to 
the  witness] . 

Q.  Could  you  look  at  this,  and  look  up  when  you're  finished? 

A.  [Reviewing  the  document  as  directed.] 

Q.  Do  you  recognize  Prosecution  18  —  Exhibit  187  for 
identification? 

A.  Yes,  sir. 

Q.  How  do  you  recognize  it? 

A.  This  is  a  —  a  PowerPoint  presentation  I  created. 

Q.  And  when  did  you  create  this? 

A.  I  completed  it  this  morning. 

Q.  Okay.  And  did  you  create  every  aspect  of  the  PowerPoint 
presentation? 

A.  I  did. 
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TC [MAJ  FEIN]:  I'm  retrieving  Prosecution  18  Exhibit 
excuse  me.  Prosecution  Exhibit  187  for  identification  [retrieving  the 
document  from  the  witness] . 

Q.  How  many  slides  was  this  —  does  this  exhibit  contain. 
Special  Agent  Shaver? 

A.  Four. 

Q.  Special  Agent  Shaver,  what  is  Wget? 

A.  That  is  a  command  line  tool  to  download  files  from  a  web 
server. 

Q.  And  what  is  a  web  server? 

A.  It  is  a  computer  which  is  running  special  software  which 
allows  it  to  host  web  pages. 

Q.  And  what  is  a  web  page? 

A.  That  is  a  graphical  interface  to  present  information  to  a 
user  about  the  content  of  a  website. 

MJ:  Okay,  I'm  going  to  ask  you  to  ask  all  three  of  those 

questions  again.  This  is  so  fast 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  x  can't  even  understand  it.  So  go  ahead. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

Q.  Special  Agent  Shaver,  what  was  Wget? 

A.  That  is  a  command  line  tool  - 

MJ:  Okay. 
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A.  -  to  download  files  from  a  web  server. 

MJ:  Go  ahead. 

Q.  And  what  is  —  I'll  ask  you  in  a  moment  about  command  line 
tool,  but  what  is  a  web  server? 

A.  That  is  just  a  computer  with  a  piece  of  software  on  it  that 
allows  it  to  host  web  pages. 

Q.  And  what  is  a  web  page? 

A.  That  is  just  a  —  it's  a  file,  but  it  presents  information 
to  a  user  to  be  viewed  over  the  internet. 

Q.  What  is  the  term  "file  type"?  What  does  that  describe  in  - 
-  in  —  on  a  computer? 


A. 

Just  what  kind  of  file  it  is 

Q. 

And  what  is  the  common  file 

type  for  a  web  page? 

A. 

An  HTML. 

Q. 

And  what  is  HTML? 

A. 

Hypertext  markup  language. 

Q. 

Now  you've  explained  what  a 

web  server,  web  pages 

a  website? 

A.  A  website  is  hosted  on  a  web  server  and  it  is  a  collection 
of  web  pages. 

Q.  And  how  does  a  website  with  web  pages  relate  to  a  web 
server? 

A.  A  web  server  hosts  them  and  they  are  contained  within. 
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Q.  And  what  do  you  mean  by  "host?" 

A.  It  presents  it  to  the  —  to  users  on  the  Internet. 

Q.  How  does  a  file  type  relate  —  now,  go  to  basically 
installed  programs.  What  is  an  installed  program? 

A.  It  is  a  program  which  has  been  used  as  an  installer.  It  s 
a  program  that  places  the  file  into  the  program  files  folder.  It 
also  generally  puts  an  uninstaller  —  so  in  case  you  need  to  remove 
the  software. 

Q.  And  I  guess  I  should  have  started  with  before  that  —  what 
is  a  program? 

A.  That  is  a  —  it's  a  file  that  interfaces  with  the  operating 
system  to  do  a  task. 

Q.  And  how  do  file  types  relate  to  installed  programs  on  a 
computer? 

A.  The  file  types  are  associated  with  installed  programs.  For 
example,  a  document  at  .doc  or  DOC  is  associated  with  the  Microsoft 
product  Office  or  Word. 

Q.  And  what  type  of  file  can  be  linked  to  do  a  web  page? 

A.  Any  type  of  file. 

Q.  And  what  does  it  mean  to  be  linked  to  a  web  page? 


A.  Within  the  web  page  you  can 


—  it’s  a  redirect  to  a  file 


somewhere  else,  whether  It’s  locally  on  that  —  the  same  web  server 
or  some  other  part  of  the  internet. 
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Q.  And  what  do  you  mean  by  redirect? 

A.  It  is  a  URL  location.  And  you  would  click  on  it  and  you 
would  then  be  brought  to  the  next  location. 

Q.  And  you  mentioned  URL.  What  is  a  URL? 

A.  Uniform  Resource  Locator. 

Q.  And  what  does  that  provide  a  user  or  a  web  browser? 

A.  It's  an  address  —  a  location  on  the  internet. 

Q.  On  the  .22  and  .40  DCGS-A  SIPRNET  computers,  what  programs 
were  installed  to  allow  all  users  to  view  the  contents  of  a  web  page: 

A.  Internet  explorer. 

ADC [CPT  TOOMAN]:  Objection,  Your  Honor. 

MJ:  Yes. 

ADC [CPT  TOOMAN]:  We  think  this  is  outside  the  scope  of  rebuttal 
If  we  want  to  talk  about  Wget,  that's  one  thing,  but  I  think  this  is 
outside  of  what  the  Court  has  said  is  appropriate. 

MJ:  Well,  the  full  automation  program  and  how  programs  get  in 

-  on  computers  and  things  like  that  has  been  raised  in  this  trial. 

So  I'm  going  to  allow  it.  Go  ahead. 

Q.  Special  Agent  Shaver,  on  the  .22  and  .40  DCGS-A  SIPRNET 
computers,  what  programs  were  installed  to  allow  a  user  to  view  the 
contents  of  a  web  page? 

A.  Explorer  and  Firefox. 

Q.  And  what  type  of  programs  are  those? 


10590 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


9 


A.  Those  are  web  browsers. 

Q.  And  what  is  the  purpose  of  a  web  browser? 

A.  It  is  allowed  to  —  user  to  view  web  pages. 

Q.  Now,  you  testified  a  moment  ago  about  linked  files  on  a  web 

page.  How  would  a  user  view  a  linked  file  on  a  web  page? 

A.  They  would  first  open  an  internet  browser,  navigate  to  the 
web  page,  identify  the  link  they  would  like  to  go  to,  move  the  mouse, 
and  click  on  the  link. 

Q.  And  then  what  would  happen  once  you  click  on  that  link? 

A.  It  would  —  the  link  would  open  —  the  link  would  open  a 

new  website  or  it  would  download  a  file. 

Q.  And  when  you  said  download  a  website,  can  the  link  be 
another  web  page? 

A.  It  can. 

Q.  And  when  you  click  the  link  that's  another  web  page,  what 
happens  to  that  web  page  you're  linked  to? 

A.  You  now  go  that  web  page. 

Q.  And  what  does  that  mean? 

A.  That  web  page  is  now  presented  to  you  within  the  web 
browser. 

Q.  Special  Agent  Shaver,  does  one  of  the  slides  you  created 
help  demonstrate  what  you  just  testified  about? 

A.  Yes. 
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Q.  Which  slide? 

A.  Slide  Number  One. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Slide  Number 

One? 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  slide  on  the  projection  screen  in  full 
view  of  all  court-martial  participants.] 

Q.  Now,  Special  Agent  Shaver,  using  this  slide.  Slide  Number 
One,  could  you  please  explain  to  the  Court  exactly  how  a  user  would 
access  a  file  name  —  file  name  "One. pdf"  on  a  web  server  through  a 
web  page? 

A.  If  you  direct  your  attention  to  the  lower  left,  that  would 
be  the  user's  computer.  They  would  open  a  web  browser.  They  would 
navigate  to  the  web  page  at  the  address  there  is  —  the  example  I 
have  given  is  www.website.sgov.gov.  The  web  page  would  be  presented 
to  the  user.  They  would  identify  the  link  to  file  name  —  file  name 
One. pdf.  The  user  would  click  on  it  because  it  would  then  pass  that 
command  to  the  web  server  to  present  that  to  the  user.  The  web 
server  would  pull  it  from  it  various  locations,  whether  it's  locally 
or  somewhere  else  on  the  internet.  It  would  then  be  presented  to  the 
user  in  the  web  page. 

Q.  Now,  Special  Agent  Shaver,  what  is  that  dotted  blue  line 

with  file  name  One. pdf  on  your  —  on  this  demonstrative  exhibit? 
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A.  It  depends.  That  is  for  --  if  you  click  on  a  file  and  your 
website  does  not  allow  you  to  view  web  --  PDF  files  or  it  allows  you 
to  save  that  locally. 

Q.  And  what  do  you  mean  by  save  it  locally? 

A.  When  you  click  on  the  link  — if  you're  —  if  the  web  page 
you're  viewing  does  not  allow  you  to  view  PDF's,  it  will  say  "would 
you  like  to  save  this  file  to  your  machine". 

Q.  And  what  do  you  have  to  do  when  you're  presented  with  that 
question? 

A.  You  can  either  say  yes  or  no. 

Q.  And  with  that  example  the  PDF,  is  that  true  for  all  other 
file  types? 

A.  It  could  be,  yes. 

Q.  What  about  web  pages? 

A.  Web  pages  are  displayed  within  a  web  browser.  An 
executable  would  be  saved. 

Q.  Okay,  so  we'll  get  to  execute  in  a  moment,  but  for  a  web 
page,  if  a  user  was  to  navigate,  in  your  example,  to 
website.sgov.gov,  to  that  web  page  --  actually  I  think  you  have  on 
webpageindex.html,  and  they  were  to  navigate  there  and  click  on 
another  web  page,  what  is  the  route  that  the  web  page  takes  to  get  to 
the  user's  computer? 

A.  Through  the  web  browser. 
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Q.  Is  that  the  same  web  browser  that  you  initially  were 
navigating  on? 

A.  Correct. 

Q.  And  do  you  normally  get  a  prompt  that  says  "do  you  want  to 
the  save  or  not"? 

A.  Not  for  an  HTML. 

Q.  An  HTML  is  a  web  page? 

A.  Correct. 

Q.  Special  Agent  Shaver,  earlier  you  testified  that  Wget  was  a 
program  that  allows  you  to  copy  files  for  a  web  server  —  I  think  you 
said  through  a  command  line  —  now  I'd  like  to  ask  you  some  specific 
question  about  Wget. 

TC [MAJ  FEIN]:  Your  Honor,  I'm  pulling  off  Slide  One  of 
Prosecution  Exhibit  187.  What  does  Wget  allow  a  user  to  do  on  a  web 
server? 

A.  To  download  files. 

Q.  And  where  —  to  where  —  where  does  it  download  to? 

A.  To  the  local  machine. 

Q.  What  do  you  mean  by  "local  machine"? 

A.  The  user  —  the  person  using  Wget  would  generally  save  it 
to  their  local  machine. 

Q.  And  when  using  Wget,  is  the  user  required  to  navigate 
through  the  original  web  page  that  they  would  otherwise  have  to  use 
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1  when  they  open  up  Internet  Explorer  or  a  web  browser? 

2  A.  It  depends  on  how  you  would  like  —  what  files  you  want  to 

3  copy.  If  you  want  to  you,  you  can  tell  it  to  precursory  go  to  a  web 

4  page,  identify  all  of  the  links,  and  copy  all  of  that  down.  Or  if 

5  you  were  just  look  —  if  you  would  just  like  to  download  one  file,  it 

6  would  not  go  through  that. 

7  Q.  And  --  and  if  you  wanted  to  download  a  single  file  why 

8  would  it  not  go  through  the  original  web  page? 

9  A.  It  doesn't  need  to.  You  would  provide  a  direct  path  --  the 
j  to  the  file  in  question. 

And  if  the  user  runs  Wget  to  obtain  a  file  on  a  web  server 
;ns? 

A.  The  file  would  be  downloaded  to  your  local  machine. 

From  where? 

From  the  web  server. 

Q.  And  does  that  target  file  then  —  when  it's  downloading 
17  again  pass  through  that  original  web  page  containing  the  link  to  the 
? 

A.  No,  sir. 

Q.  Special  Agent  Shaver,  do  —  do  one  of  the  slides  that  you 
21  created  help  demonstrate  what  you  just  testified  about? 

A.  Yes,  sir. 

Which  slide  that? 
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A.  Slide  Two. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Slide  Two? 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  is  this  Slide  Two  [referring  to  the 
projection  screen]? 

A.  Yes,  sir. 

Q.  And  could  you  please  explain  to  the  Court  this 
demonstrative  exhibit  on  how  Wget  downloads  this  filename.pdf  from  a 
web  server? 

A.  Yes,  sir.  Again,  in  the  lower  left  is  the  user.  They  use 
Wget.  The  —  is  —  it  goes  to  the  website;  again  website.sgov.gov. 

It  downloads  the  file  name  .pdf,  and  that  is  then  saved  locally  on 
the  machine. 

Q.  And  when  a  user  runs  Wget  —  and  your  example  uses  a  PDF, 
is  that  also  what  you  just  describe  the  same  for  a  web  page? 

A.  It  depends  on  how  you  want  to  do  it.  You  can  —  you  can 
say  download  a  web  page  and  it  will.  You  can  also  tell  it  to  go  to  a 
web  page  only  pick  out  certain  files.  It  is  a  —  Wget  is  a  very 
configurable  tool. 

TC [MAJ  FEIN]:  I'm  removing  Slide  Two,  Your  Honor. 

[The  Trial  Counsel  removed  the  slide  from  the  projection  screen.] 
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Q.  Special  Agent  Shaver,  before  I  proceed,  all  of  the  next  few 
questions  will  be  based  on  your  knowledge  of  Wget  on  a  computer 
regardless  of  whether  it  is  authorized  or  not  to  be  installed  or 
stored  on  a  computer  —  just  about  the  capabilities.  Technically 
speaking,  how  does  a  user  introduce  Wget  onto  there  their  Windows 
based  computer? 

A.  They  would  go  to  —  open  up  a  web  browser,  navigate  to  a 
web  site  that  has  the  file  Wget,  download  it,  and  save  it  to  the 
desktop. 

Q.  Now  what  if  —  so  same  —  now  the  same  question  on  a 
technical  basis,  how  does  and  intro  —  one  —  how  could  one  introduce 
Wget  onto  a  SIPRNET  computer? 

A.  User  would  open  a  web  browser,  search  for  Wget,  download  it 
to  on  the  NIPRNET  computer,  put  it  on  some  kind  of  transport  medium, 
a  CD,  for  example,  and  then  walk  over  to  the  SIPRNET  and  put  the  CD 
into  the  SIPRNET  computer  and  copy  the  file  from  the  CD  onto  their 
user  profile. 

Q.  Where  on  a  computer  can  Wget  be  run  from? 

A.  Anyplace  the  user  has  access. 

Q.  And  what  do  you  mean  by  that? 

A.  User  accounts  --  there's  --  Windows  has  permissions. 

There's  certain  places  it  cannot  —  a  user  cannot  access;  for 
example,  the  Windows  folder  itself  or  other  profiles  on  the  computer. 
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Q.  And  what  do  you  mean  by  profiles? 

A.  User  accounts  —  other  people  who  have  logged  onto  that 
computer,  they  would  —  it  would  create  a  profile,  and  that  would  be 
—  a  normal  user  could  not  access  the  files  in  those. 

Q.  Now,  again,  technically  speaking,  can  Wget  be  run  from  a  CD 
or  DVD? 

A.  It  could. 

Q.  Could  it  be  run  from  a  USB  drive? 

A.  Yes. 

Q.  What  about  an  SD  card? 

A.  Yes. 

Q.  A  share  drive? 

A.  Yes,  sir. 

Q.  And  is  Wget  a  program  that  must  be  installed? 


Q.  Why? 

A.  It  is  a  self-contained  executable. 

Q.  And  what  is  a  "self-contained  executable?" 

A.  That  is  a  —  it's  a  program  that  does  not  need  any  other 
libraries  or  any  other  files  run.  It  has  everything  it  needs  built 
into  itself. 

Q.  And  when  you  say  "library"  what  do  you  mean? 

A.  Libraries;  when  programming  files  on  Windows  computers 
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there  are  various  libraries.  One  is  a  mouse  library.  It  does  not 
need  that.  It  has  all  the  components  rolled  into  it. 

Q.  Is  there  a  difference  between  a  program  and  an  executable? 

A.  They're  synonymous. 

MJ:  They're  what? 

WIT:  They're  the  same  thing. 

Q.  And  before  we  keep  going,  in  your  own  words,  what  is 
essentially  a  program  or  executable? 

A.  It  is  - 

Q.  Specifically,  how  does  it  distinguish  from  another  type  of 

file? 

A.  It  is  a  program.  A  program  is  a  file  that  can  interface 
with  a  —  the  operating  system  to  execute  a  task. 

Q.  Based  on  your  experience  with  Windows  computers,  is  there 
any  process  or  limitation  that  could  be  used  to  prevent  a  program 
from  being  installed  on  a  computer? 

A.  Yes. 

Q.  And  what  is  that? 

A.  You  would  need  administrator  level  privileges  to  install  a 
program. 

Q.  Now  based  on  your  experience  with  Windows  XP  computers,  is 
there  any  process  or  limitation  that  could  be  used  to  prevent  a  self¬ 
executable  file  from  being  installed  on  a  computer? 
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A.  You  can't  install  it,  sir. 

MJ:  Excuse  me. 

WIT:  I'm  sorry,  he  used  the  word  "installed." 

MJ:  Yes. 

WIT:  A  self-contained  executable  is  not  a  file  that  can  be 
installed.  It's  a  single  file. 

Q.  Well,  then  what  is  it?  How  is  it  that  a  self  —  how  does  a 
self-executable  get  moved  onto  a  computer  to  run  it  if  it's  not 
installed? 

A.  You  copy  it  from  the  source  —  a  CD  or  —  and  just  copy  it 
over  to  the  local  —  up  to  the  user  account? 

Q.  Okay,  so  then  in  your  experience,  is  there  a  way  that 
Windows  XP  computers  prevent  a  user  from  copying  over  self-executable 
files  onto  a  computer  - 

A.  No. 

Q.  -  from  an  external  drive? 

A.  No,  sir. 

Q.  Based  on  your  experience  with  Windows  XP  computers,  is 
there  any  process  or  limitation  that  can  be  used  to  prevent  a  self¬ 
executable  file  from  being  run  on  a  computer  or  any  other  storage 
device? 

A.  Sorry,  could  you  repeat  that  question  again? 

Q.  Absolutely.  Based  on  your  experience  with  Windows  XP 
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computers,  is  there  any  process  or  limitation  that  can  be  used  to 
prevent  a  self-executable  file  from  being  run  on  a  computer  or  an 
external  media  device? 

A.  There  is  a  software  suite  called  HBSS,  a  host  base  security 
system,  which  is  a  —  a  Department  of  Defense  program  which  has  a  lot 
of  policies.  It  can  prevent  a  file  like  that  from  being  run. 

Q.  And  so  specifically  can  this  HBSS  prevent  a  self-executable 
from  being  run  on  a  computer  or  from  its  peripheral? 

A.  Yes. 

Q.  During  your  examination  of  PFC  Manning's  DCGS-A  SIPRNET 
computer  .22  .40  what  operating  system  was  installed? 

A.  Windows  XP. 

Q.  And  was  HBSS  installed  on  those  computers? 

A.  No,  sir. 

Q.  To  the  best  of  your  knowledge,  when  you  were  still  in  the 
Department  of  Defense,  did  the  Department  of  Defense  use  HBSS 
technology  on  SIPRNET  in  2009/2010? 

A.  No. 

MJ:  That's  HBSS  or  HPSS? 

WIT:  B. 

MJ:  Okay. 

Q.  And  what  does  HBSS  stand  for? 

A.  Host-Based  Security  System. 
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1  Q.  From  your  examination  of  the  .22  and  .40  computers,  was 

2  there  any  computer  technological  limitation  from  running  a  self- 

3  contained  file  executable  file  from  the  hard  drive  or  peripheral? 

4  A.  No. 

5  Q.  So  based  on  your  exam'  of  —  of  PFC  Manning's  SIPRNET 

6  computers,  what  was  the  only  way  a  user  could  be  prevented  from 

7  either  copying  a  self-contained  executable  over  or  running  one  from  a 

8  CD? 


9  A.  Policy  was  one.  To  remove  it  from  the  CD  was  to  prevent  it 

10  from  being  copied  from  a  CD  would  be  to  remove  the  CD  —  a  CD  ROM. 

11  Q.  I'm  sorry? 

12  A.  I'm  sorry. 

13  Q.  No,  go  ahead. 

14  A.  I  —  the  —  the  technical  limitation  would  be  to  remove  a 

15  CD  player  from  the  computer  so  you  cannot  copy  it  off.  Remove  USB 

16  ports,  but  there's  —  that's  it  for  technology. 

17  Q.  So  just  to  make  sure  the  Court  understands  is,  you're 

18  saying  remove  the  actual  physical  CD  ROM  out  of  the  computer? 

19  A.  Correct. 

20  Q.  In  your  examination  of  Private  First  Class  Manning's  .22 

21  and  .40  computers,  did  you  find  any  evidence  of  Wget  being  run? 

22  A.  I  did. 

23  Q.  Where  did  you  find  the  evidence  of  Wget  being  run? 
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A.  From  the  prefetch  file. 

Q.  What  are  "prefetch  files?" 

A.  This  is  a  Windows  program  —  it's  a  Windows  system  file 
that's  created  to  help  Windows  start  programs  faster  the  next  time 
you  use  them. 

Q.  So  how  does  Microsoft  Windows  use  a  prefetch  file? 

A.  When  a  program  is  first  run,  a  prefetch  file  is  created. 

It  contains  some  information  —  some  of  the  memory  —  some  of  the 
file  is  kept  there.  So  when  you  double  click  the  program  a  second 
time,  it's  injected  into  the  RAM  faster.  So  this  is  Window's  idea  to 
speed  up  launching  of  programs. 

Q.  And  could  you  give  the  Court  an  example  —  use  Microsoft 

Outlook  as  an  example  of  how  Windows  would  use  these  prefetch  when 

you  run  Microsoft  Outlook? 

A.  The  first  time  you  launch  Outlook  a  prefetch  file  would  be 
created.  It  would  capture  the  path  of  where  it  was  run  from  and, 
again,  the  time  prefetch  file  would  be  created.  But  it  would  capture 
a  part  of  the  program  in  RAM.  So  when  you  terminate  Outlook  and  you 

launch  it  for  the  second  time  it  would  launch  faster  —  it  would 

start  faster. 

Q.  Now,  Special  Agent  Shaver,  what  is  actually  contained 
within  the  prefetch  files  for  each  program? 

A.  The  path  of  the  executable,  the  time  and  date  or  the  date 
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last  run,  the  date  it  was  created,  and  how  many  times  it  had  run. 

Q.  What  do  you  mean  by  "the  path"  of  the  executable? 

A.  Where  it  was  physically  located  on  the  computer. 

Q.  Is  that  similar  to  a  URL? 

A.  Yes. 

Q.  And  how  is  it  similar? 

A.  It  is  just  a  location,  but  it  would  be  a  location  on  the 
local  machine. 

Q.  Why  is  the  path  captured  within  the  prefetch  file? 

A.  It's  to  —  it's  a  Microsoft  decision  to  do  that.  But  it 
allows  you  to  —  if  you  have  multiple  instances  of  the  same  program; 
each  program  has  a  prefetch  file,  so  they  can  all  launch  faster  the 
next  time. 

Q.  What  do  you  mean  by  "multiple  instances  of  a  program?" 

A.  Say  if  you  have  several  copies  of  your  example  Outlook,  if 
you  had  Outlook  located  on  several  locations  on  the  computer  they  can 
run  —  they  would  launch  faster  the  second  time. 

Q.  So  what  happens  to  the  prefetch  file  if  a  program  is  run 
from  a  different  location  on  the  same  user's  computer? 

A.  A  new  prefetch  file  could  be  created. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  handing  you  what's  been 
marked  as  Prosecution  Exhibit  188  for  identification.  Would  you 
review  that  and  look  up  when  you're  finished  reading  [handing  the 
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document  to  the  witness] . 

Q.  Do  you  recognize  that  document? 

A.  [Looking  at  the  document]  Yes,  sir. 

Q.  What  is  it? 

A.  This  is  a  document  I  created. 

Q.  And  —  well,  what  is  the  actual  document? 

A.  The  document  is  the  —  it's  a  listing  of  prefetch  files 
from  the  .22  computer,  which  were  created  by  the  Wget.exe  program. 
Q.  And  how  do  you  recognize  that  document? 

A.  I  created  this. 

TC [MAJ  FEIN]:  Okay.  Thank  you.  Your  Honor,  permission  - 

MJ:  Which  exhibit  is  it? 

TC [MAJ  FEIN]:  Your  Honor,  it's  Prosecution  Exhibit  188  for 
identification.  Permission  to  publish.  Your  Honor. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  court-martial  participants.] 

MJ:  Has  that  exhibit  been  admitted  yet? 

TC [MAJ  FEIN]:  No,  it  has  not.  Your  Honor.  It's  for 


identification . 

MJ:  Okay. 

TC[MAJ  FEIN]:  I'm  going  to  zoom  in  to  make  it  a  little  easier 
for  you.  Special  Agent. 
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Q.  Starting  at  the  top.  Special  Agent  Shaver,  could  you  please 
explain  or  really  orient  the  Court  on  what  is  —  what  is  listed 
across  the  top  for  this  exhibit? 

A.  The  top  is  the  file  I  —  I  named  it 
theprefetchfiles.Wget.exe  from  .22. 

Q.  Now  you  —  did  you  add  that  title? 

A.  I  did. 

Q.  Okay.  And  now  what  is  the  first  column? 

A.  The  first  column  is  a  line  number.  The  next  column  is  the 

prefetch  file  name,  and  that's  also  has  the  path,  the  date  that  the 
prefetch  file  was  created,  the  date  the  last  —  that  prefetch  was 
last  run.  The  next  column  is  the  program  which  created  that  prefetch 
file . 

TC [MAJ  FEIN]:  And  I'll  move  this  for  you  [moving  the  slide  on 
the  monitor] . 

WIT:  Thank  you. 

A.  And  the  last  is  the  path  contained  within  the  prefetch  file 
of  where  that  Wget  program  was  run  from. 

Q.  So  you've  now  mentioned  —  just  before  we  even  get  into  the 
information  contained  within  the  exhibit,  you  mentioned  the  word 
"path"  twice.  What  is  the  difference  between  the  first  time  you  said 
it  with  the  prefetch  file  name  and  the  path  for  a  —  inside  of  the 
prefetch  file;  what's  the  difference  between  those  two  paths? 
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1  A.  The  path  —  the  first  one  —  the  column  on  the  left,  that's 

2  the  actual  physical  location  on  the  computer  of  that  Wget  prefetch 

3  file.  You  can  site  —  it's  C:\Windows,  forward  name  is  prefetch  and 

4  there  is  the  Wget  prefetch  files.  The  path  on  the  right  is  within  — 

5  —  looking  within  those  individual  prefetch  files  of  —  and  it  shows 

6  you  where  Wget  was  run  from. 

7  Q.  Now,  when  you  say  "run  from"  what  do  you  mean? 

8  A.  The  location  on  the  hard  drive  where  it  was  executed. 

9  Q.  And  how  did  you  create  this  exhibit;  Prosecution  Exhibit 

10  188  for  identification? 

11  A.  This  is  a  —  this  is  —  by  using  the  EnCase  forensic 

12  program,  I  extracted  this  information. 

13  Q.  And  what  information  did  you  extract  and  what  information 

14  did  you  add? 

15  A.  I  added  the  first  —  the  first  column,  which  is  line 

16  numbers  and  the  —  the  fifth  column,  the  program  switch  create  — 

17  which  created  the  prefetch  files.  And  I  also  created  the  header. 

18  Q.  On  the  top? 

19  A.  Yes. 

20  Q.  And  is  this  a  fair  and  accurate  representation  of  the 

21  information  that  you  pulled  from  EnCase? 

22  A.  Yes. 

23  Q.  What  information  on  this  document  did  you  add  —  well,  you 
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just  —  you  just  explained  that.  So  going  now  to  the  path  within  the 
prefetch  file  to  the  far  right,  could  you  please  explain  to  the  Court 
what  that  means  as  far  as  the  first  entry  for  Number  One? 

A.  It  means  that  Wget.exe  was  run  from  documents  and  settings 
bradley .manning/mydocuments/yada,  folder  060000,  and  that's  where  it 
was  run  from. 

Q.  How  do  you  know  that? 

A.  That  is  within  the  prefetch  file. 

Q.  It  that  a  —  is  that  automatically  generated? 

A.  Yes. 

Q.  And  for  another  example,  what  about  Line  20?  Could  you 
explain  Line  20?  And  actually  start  from  the  line  number  and  explain 
line  for  the  Court,  please. 

A.  The  —  Line  Number  20  - 

TC [MAJ  FEIN]:  I'll  zoom  in  for  you  and  move  it. 

WIT:  Thank  you. 

TC [MAJ  FEIN]:  Go  ahead. 

A.  The  first  column  is  the  line  number.  Number  20.  The  second 
is  the  physical  location  of  the  Wget  prefetch  file  on  the  .22 
computer.  The  next  one  is  the  date  it  was  first  created  and  the  date 
--  the  second  column  —  fourth  column,  excuse  me,  is  the  date  it  was 
last  run.  Wget.exe  was  the  program  that  created  the  prefetch  file. 
And  the  last  column  shows  the  path  where  is  run  from;  it  was 
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documents  and  settings  bradley .manning/mydocuments,  the  folder  named 
bloop. 

Q.  And  so  when  you  say  a  program  is  run  from  there,  Wget  in 
this  instance,  where  was  it  physically  saved  on  the  hard  drive? 

A.  It  was  physically  saved  in  the  directory  as  shown;  the 
bloop  folder. 

Q.  And  while  this  image  is  still  up,  what  does  the  term 
"unknown"  mean  in  the  far  right  column? 

A.  Several  of  the  Wget  files  have  been  deleted  and 
overwritten,  and  the  contents  have  been  rewritten.  I  don't  know 
where  they  were  run  from. 

Q.  Now  when  you  say  the  Wget  file,  do  you  mean  the  Wget  or  the 
Wget  prefetch  files? 

A.  The  Wget  prefetch  files. 

TC[MAJ  FEIN];  I'm  going  to  zoom  out  here.  Special  Agent  Shaver, 
to  show  the  whole  document  [moving  the  document  on  the  projection 
screen] . 

Q.  Why  are  there  20  instances  listed  here  —  20  rows? 

A.  That  means  Wget  was  run  from  20  different  locations  on  that 
hard  drive. 

Q.  In  your  experience,  why  would  a  user  run  Wget  from 
different  locations? 

A.  You  can  use  —  to  download  files  —  if  Wget  is  run  from 
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1  multiple  locations  at  the  same  time,  they  can  all  —  they  can  each  be 

2  downloading  a  large  set  of  files.  So  together,  running 

3  simultaneously,  you  can  download  an  even  larger  set  of  files. 


Q. 

Where  did  PFC  Manning 

store  Wget  and 

run  the  program  from? 

A. 

Which  time? 

Q. 

Well,  what  computer  was  it  stored  on? 

A. 

This  is  the  .22. 

Q. 

And  did  you  see  any  — 

■  I  asked  you  a 

very  broad  question. 

9  but  based  off  of  your  analysis  at  least  of  the  prefetch  file,  what 

10  was  the  general  location  or  the  most  specific  location  where  they  all 

11  were  run? 

12  A.  In  "my  documents"  folder  within  the  bradley .manning  user 

13  profile. 

14  TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 

15  Prosecution  Exhibit  188  for  identification  as  Prosecution  Exhibit 

16  188. 

17  ADC [CPT  TOOMAN] :  No  objection,  ma'am. 

18  MJ:  All  right.  May  I  see  it? 

19  [The  Trial  Counsel  handed  the  document  to  the  Military  Judge.] 

20  MJ:  Prosecution  Exhibit  188  for  identification's  admitted. 

21  Q.  Special  Agent  Shaver,  in  your  career  how  many  U.S.  Army 

22  computers  have  you  examined? 

23  A.  Hundreds. 
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Q.  How  many  Army  computers  with  Windows  have  you  seen  Wget  on? 
A.  Two. 

Q.  And  which  ones  were  those? 

A.  .22  and  .139. 

Q.  Are  those  computers  that  are  in  this  case? 

A.  Yes,  sir. 

Q.  And  once  Wget  is  copied  onto  a  computer  how  does  a  user  run 

Wget? 

A.  From  the  command  prompt. 

Q.  What  do  you  mean  by  "command  prompt?" 

A.  The  command  prompt  is  a  Windows  program  which  allows  a  user 
to  interface  with  the  operating  system  and  run  programs  which  have  a 
nongraphical  interface. 

MJ :  What  does  that  mean? 

WIT:  Ma'am,  a  graphical  interface.  You  can  interact  with  it. 

You  can  use  your  mouse.  You  can  —  you  can  click  on  it.  The 
nongraphical  is  just  a  command  —  it's  just  text.  There's  no  —  no 
pictures . 

Q.  Special  Agent  Shaver,  do  one  of  the  slides  you  created  help 
demonstrate  what  a  command  prompt  looks  like? 

A.  Yes. 

Q.  And  which  slide  is  that? 

A.  Slide  Four. 
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TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Slide  Four. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Now,  Special  Agent  Shaver,  before  we  continue  —  just  to 
seek  clarification  for  the  record  —  what  is  this  —  Slide  Four? 

A.  That  is  a  command  prompt. 

TC[MAJ  FEIN]:  I'm  sorry,  let  me  zoom  out  because  there's  some 
text  on  top  [zooming  out  on  the  projection  screen  as  indicated] . 

Q.  And  how  did  you  create  this  image  of  a  command  prompt? 

A.  I  created  a  Windows  XP  virtual  machine.  I  then  created  — 

added  the  user  bradley .manning.  I  then  —  from  that  I  logged  into  — 
as  that  profile.  I  then  started  the  command  program  —  the  command 
prompt,  and  I  took  this  screenshot. 

Q.  And  I'm  going  to  ask  you  about  how  —  how  you  started  the 
command  prompt  —  we'll  get  to  that  in  a  moment,  but  just  —  again, 
is  this  from  PFC  Manning's  actually  —  actual  computer? 

A.  No. 

Q.  And  —  and  how  did  you  create  this  demonstrative  aid? 

A.  Again,  I  created  a  Windows  XP  virtual  machine.  I  added  a 

user  account  called  bradley .manning.  I  then  logged  into  the 
bradley .manning  user  account.  I  started  a  command  prompt,  and  I  took 
this  screenshot. 
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1  Q.  So  going  back  to  the  —  the  Court's  question  about 

2  graphical  user  interfaces,  how  does  the  command  prompt  that  is 

3  displayed  up  here  —  or  a  command  prompt  —  how  does  one  use  the 

4  command  prompt  in  general? 

5  A.  You  would  enter  commands  by  text. 

6  Q.  And  what  do  you  actually  mean  by  that? 

7  A.  You  would  actually  type  out  the  commands.  In  this  case 

8  Wget.  And  you  would  you  put  several  options.  You  would  identify  the 


9 

location 

of  the  file  where  you  would  like  to  download  it  from. 

And 

10 

then  would  you  hit  enter. 

11 

Q. 

Now  when  you  use  the  command  prompt,  do  have  to  use 

a  mouse 

12 

to  click 

on  options? 

13 

A. 

No. 

14 

Q. 

And  does  the  command  prompt  let  you  navigate  web 

pages? 

15 

A. 

No. 

16 

TC [MAJ  FEIN]:  Your  Honor,  I'm  pulling  off  Slide  Four 

of 

the 

17 

exhibit 

[removing  the  slide  from  the  projector  screen] . 

18 

Q. 

What  happens  when  a  user  double  clicks  a  program 

in 

Windows 

19 

XP? 

20 

A. 

It  will  start. 

21 

Q. 

Does  that  matter  if  it's  an  installed  program  or 

-- 

or  — 

22 

is  that 

true  for  an  installed  program? 

23 

A. 

Yes . 
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Q.  Is  that  also  true  for  a  self-contained  executable? 

A.  It  depends  on  the  executable;  what  its  function  is. 

Q.  And  what  —  what  do  you  mean  by  that? 

A.  If,  for  example,  the  —  something  executable  is  Wget,  if 

you  double  clicked  on  it,  the  command  prompt  would  open  and  close  and 
nothing  —  it  would  not  do  anything. 

Q.  Why? 

A.  Because  it  was  never  —  there's  no  graphical  component  to  - 
-  built  into  that.  It's  --  again,  it's  a  command  line  tool  only. 

Q.  So  how  does  Wget  run? 

A.  It  runs  by  use  of  —  through  a  command  prompt  —  a  command 
line.  You  type  Wget.  You  would  tell  it  to  —  what  you  would  like  to 
save  the  file  name  as,  and  where  would  you  like  to  get  file  from. 

Q.  And  are  there  options  that  a  user  has  when  they  run  Wget? 

A.  Yes,  sir. 

Q.  And  what  —  how  does  one  learn  of  those  options? 

A.  If  you  —  in  the  command  prompt  if  you  type  Wget  and  you 

put  space  dash  H;  H  for  help,  you  hit  enter,  the  help  file  will 
appear  on  the  screen. 

TC [MAJ  FEIN]:  Your  Honor,  I'm  handing  —  Your  Honor,  I'm 
handing  Special  Agent  Shaver  Prosecution  Exhibit  189  for 
identification  [handing  the  document  to  the  witness] .  Special  Agent 
Shaver,  could  you  please  review  that  and  let  me  know  when  you're 
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1  finished. 

2  [The  witness  did  as  directed.] 

3  Q.  Thank  you.  What  is  that  document? 

4  A.  This  is  a  document  that  I  pulled  --  I  extracted  from  the 

5  .22  computer  from  bradley .manning' s  user  profile.  It  is  the  Wget 

6  help  output  file. 

7  Q.  How  do  you  recognize  that  document? 

8  A.  My  initials  are  on  it  and. 

9  Q.  And  have  you  seen  the  information  on  that  document  before  - 

10  -  even  before  finding  it  on  PFC  Manning's  .22  computer? 

11  A.  I  have. 

12  Q.  And  where  have  you  seen  the  information  within  that 

13  document? 

14  A.  The  use  of  Wget. 

15  Q.  What  did  you  mean  by  that? 

16  A.  While  at  the  CCIU  I  had  —  I  was  —  I  used  Wget  on  a 

17  regular  basis. 

18  TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish? 

19  MJ:  Go  ahead. 

20  [The  Trial  Counsel  displayed  the  document  on  the  projection  screen  in 

21  full  view  of  all  court-martial  participants.] 

22  Q.  Special  Agent  Shaver,  could  you  please  explain  briefly  what 

23  this  document  —  explain  what  the  document  also  is  trying  to  explain? 
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A.  How  do  use  Wget.  There  are  —  it  is  a  three-page  document 

of  all  of  the  options  you  can  do  with  Wget.  And  this  is  the  command 

line  you  would  have  to  build  to  make  it  run. 

Q.  And  what  do  you  mean  by  "options?" 

A.  To  do  something  —  it's  a  choice.  For  example,  the  dash 

capital  0  —  you  see  that.  It's  - 

Q.  Where  with  is  dash  capital  0? 

A.  It's  like  - 

Q.  Is  it  under  a  subsection? 

A.  -  yes,  download. 

Q.  It's  under  download?  Is  it  the  second  down  from  download? 

A.  It  is. 

Q.  Okay.  So,  please,  go  ahead.  What  about  dash  capital  0? 

A.  That  writes  documents  to  a  file.  So  if  you  download  a  file 
it  will  tell  —  you  would  tell  it  the  file  name,  it  will  write  that 
file  name. 

Q.  So  when  a  user's  running  Wget,  what  —  how  does  one 
download  a  file  of  a  file  name  like  you  just  described?  What  do  they 
have  to  put  into  the  command  prompt? 

A.  They  would  have  to  put  Wget  space  dash  capital  0  a  file 
name  followed  by  the  URL  of  the  location  of  the  file  would  you  like 
to  download. 

Q.  What  do  you  mean  again  by  the  "URL?" 
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A.  That  is  a  location  on  the  internet  where  the  file  resides. 

Q.  Going  back  to  these  options,  how  many  options  do  you 
estimate  there  are  for  running  Wget? 

A.  There  are  three  pages;  quite  a  few. 

Q.  Three  pages  worth  of  these  types  of  options? 

A.  Yes. 

Q.  And  so  what  does  a  user  have  to  figure  out  ahead  of  time 
before  they  run  Wget? 

A.  What  they  want  to  do.  They  need  to  first  identify  where 
the  file  is  on  the  internet;  where  they  would  like  to  download  it 
from. 


Q.  Why  —  why  —  why  does  a  user  need  to  know  where  and  what 
file  they  need  to  download? 

A.  Wget  needs  to  be  a  —  it  needs  a  specific  location  of  the 
file  on  the  internet  to  down  —  to  be  downloaded. 

Q.  And  what  else  must  a  user  do  before  they  can  actually  run 
Wget?  You  mentioned  they  have  to  identify  a  certain  document? 

A.  They  need  the  full  path  of  the  document.  They  also  have  to 
obviously  have  Wget,  and  where  they  want  to  store  it. 

Q.  And  now  you're  just  talking  about  if  —  I  assume,  and 
please  correct  me  if  I'm  wrong,  that  this  is  only  if  you're 
downloading  a  single  document,  correct? 

A.  Correct. 
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Q.  But  there  are  other  ways  to  run  Wget? 

A.  Yes,  many. 

Q.  And  why  must  a  URL  or  address  be  specific? 

A.  The  internet  is  not  vague.  It  has  to  be  specific  address 
to  find  a  specific  file. 

Q.  And  so  once  a  user  puts  in  this  information  into  the 
command  prompt,  what  do  they  do? 

A.  Hit  enter. 

Q.  And  what  happens  then? 

A.  Wget  will  navigate  to  the  URL  in  question,  and  download  the 
file  that  you  specified,  and  save  it  as  the  file  name  that  you  have 
specified. 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 
Prosecution  Exhibit  189  for  identification  as  Prosecution  Exhibit 
189. 

ADC [CPT  TOOMAN] :  No  objection. 

MJ:  May  I  see  it,  please? 

[The  Trial  Counsel  handed  the  document  to  the  Military  Judge.] 

MJ:  Prosecution  Exhibit  189  for  identification's  admitted. 

Q.  Special  Agent  Shaver,  do  one  of  the  slides  you  created  help 
explain  the  components  of  Wget  —  the  Wget  command  and  how  a  user 
would  run  it? 

A.  Yes. 
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Q.  What  slide? 

A.  Slide  Number  Three. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Slide  Number 
Three. 

M J:  That's  from  the  exhibit  you  were  using  earlier? 

TC [MAJ  FEIN]:  I'm  sorry.  Yes,  Your  Honor,  from  Exhibit  187  for 
identification. 

MJ:  187.  Go  ahead. 

[The  Trial  Counsel  displayed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Now,  Special  Agent  Shaver,  could  you  please  explain  how  did 
you  create  this  slide? 

A.  I  made  up  a  web  address,  and  I  looked  at  the  help  file,  and 
I  broke  it  down  by  sections. 

Q.  So  could  you  please  explain  to  the  Court  based  off  this 
slide,  again,  how  a  user  would  download  a  single  file  from  a  known 
web  server? 

A.  The  --  from  the  left  to  right,  the  —  Wget  is  the  first 
command;  you  type  Wget.  The  next  one  is  dash  capital  0  and  the  file 
name  one. pdf,  this  tells  —  this  is  what  you  want  to  save  and  where 
you  want  to  save  it.  The  next  block  is  the  web  address  of  the  web  -- 
of  the  web  server  and  where  —  where  it's  located  on  the  internet. 

And  finally  the  last  block  is  the  file  name  would  you  like  to 
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download. 

Q.  Now,  Special  Agent  Shaver,  you  said  that  the  dash  capital  0 
and  then  you  didn't  say  space,  but  there's  a  space  up  there  and  the 
file  name  tells  you  where  you  want  to  save  it  in  the  file  name.  What 
do  you  mean  by  "where  you  want  to  save  it?" 

A.  The  path  to  where  you  would  like  to  save  a  file.  If  you're 
running  Wget  from  one  folder  and  you  would  like  to  save  it  to  another 
you  would  have  to  put  in  a  different  path  so  the  program  knows  where 
to  store  the  file. 

Q.  So  if  you  do  not  put  this  —  this  path  information  in  like 
in  this  example  here,  where  does  that  file  that's  being  downloaded 
through  Wget  —  where  does  it  store  on  the  hard  drive? 

A.  The  same  lo  —  the  same  folder  that  Wget  is  run  from. 

TC[MAJ  FEIN]:  Your  Honor,  removing  Slide  Three  of  prosecution 
Exhibit  187  for  identification  [removing  the  document  from  the 
projection  screen] . 

Q.  Special  Agent  Shaver,  during  your  investigation  did  you 
visit  the  Net-Centric  Diplomacy  web  site? 

A.  I  did. 

Q.  Did  the  web  site  have  a  web  page? 

A.  It  did. 

Q.  What  was  that  address  for  URL  of  that  web  page? 

A.  NCD.state.sgov.gov. 
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Q.  And  was  that  of  the  website  or  web  page? 

A.  That  is  the  web  page  —  that  is  the  website. 

Q.  And  what  was  the  actual  address  of  the  web  page  for  the  NCD 
database? 

A.  HTTP: //NCD. state. sgov.gov/index.HTML. 

Q.  And  when  you  were  on  that  web  page  was  that  the  main  page 
for  NCD  database  SIPRNET? 

A.  Yes. 

Q.  And  how  do  you  know  that? 

A.  I  went  there. 

Q.  And  did  that  website  give  you  an  option  to  —  to  view 

cables  on  its  face? 

A.  No,  you  had  a  —  there  was  a  search  function. 

Q.  And  did  you  attempt  to  search  for  a  cable? 

A.  I  did. 

Q.  Did  you  search  for  a  cable? 

A.  I  did. 

Q.  And  what  happened  once  you  searched  for  a  cable? 

A.  The  cable  —  I  was  present  with  a  choice  and  you  could  view 

the  file  —  click  on  the  cable  and  view  the  —  the  contents. 

Q.  And  when  you  clicked  on  the  cable  to  view  its  contents, 
what  happened  on  your  computer  when  you  clicked  on  the  cable? 

A.  It  —  it  stayed  —  displayed  it  within  my  web  browser. 
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Q.  Now  is  that  an  example  of  a  link  to  another  web  page  you 
testified  about  earlier? 

A.  Yes. 

Q.  And  why  did  —  in  general,  why  did  you  go  to  NCD  database 
for  this  case? 

A.  This  case  —  I  was  told  NCD  cables  were  involved  in  this 
case.  I  had  never  seen  one  before.  I  wanted  to  see  what  one  looked 
like . 

Q.  And  when  did  you  go  to  the  web  page? 

A.  Summer  of  2010. 

Q.  Thank  you.  And  now  I'd  like  to  focus  your  testimony  on  how 
PFC  Manning  ran  Wget  on  his  SIPRNET  computer.  You  testified  earlier 
that  PFC  Manning  had  the  program  Wget.exe  he  saved  in  multiple 
folders  within  his  My  Documents.  I  am  now  going  hand  you  PE  100  for 
identification.  This  is  a  previously  marked. 

[Pause] 

M J :  Which  exhibit  are  you  pulling? 

TC[MAJ  FEIN]:  Prosecution  Exhibit  100  for  identification, 
ma'am. 

[Pause] 

TC [MAJ  FEIN]:  I'm  now  handing  you.  Special  Agent  Shaver, 
Prosecution  Exhibit  100  for  identification  [handing  the  document  to 
the  witness].  Please  review  that  and  look  up  when  you're  finished. 
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[The  witness  did  as  directed.] 

Q.  Do  you  recognize  that  document? 

A.  I  do. 

Q.  And  what  is  that  document? 

A.  This  is  the  document  backup  that  XLXS,  which  I  extracted 
from  the  .22  computer  from  the  bradley .manning  user  profile. 

Q.  And  how  do  you  recognize  that  document? 

A.  I  created  the  screenshot. 

Q.  And  is  that  same  document  you  previously  testified  about  a 
month  ago  with  Captain  Morrow? 

A.  Yes,  sir. 

TC [MAJ  FEIN]:  Permission  to  publish.  Your  Honor. 

MJ:  Go  ahead. 


TC [MAJ  FEIN] :  Do  you  need  some  water.  Special  Agent  Shaver? 

[The  witness  was  provided  some  water  by  the  Trial  Counsel.] 

Q.  Can  you  please  explain  for  the  Court  —  I'm  actually  going 
to  scoot  this  up  [moving  the  document  on  the  projection  screen]  first 
of  what  of  --  what  type  of  —  what  file  type  did  this  screenshot  come 
from?  What  type  —  what  file  and  what  was  its  file  type? 

A.  This  was  an  Excel  spreadsheet,  and  the  file  type  would  be 

XLXS. 

Q.  And  what  does  the  Wget  at  the  bottom  left  of  the  exhibit 
show  —  or  what  is  that? 
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A.  That  is  the  —  the  sheet  of  the  workbook. 

Q.  And  now  just  using  the  top  portion  as  an  example,  what  does 

this  exhibit  show? 

A.  It  shows  Wget  dash  capital  0  save  any  file  as 
10canberral53.html  from  the  website  htpp:  —  excuse  me,  from  the  web 
server  http://NCD.state.sgov.gov  and  a  slash  message  slash  reference, 
and  it's  the  file  it's  downloading  is  10canberral53 . 

Q.  And  so  going  through  this  example  and  --  are  you  —  and  you 
write  line  10926? 

A.  Correct. 

Q.  What  web  server  is  the  file  being  downloaded  from? 

A.  The  NCD  web  server. 

Q.  How  do  you  know  that? 

A.  From  the  address. 

Q.  And  what  is  the  file  name  of  the  file  being  on  this  —  what 
is  the  file  name  of  the  —  file  on  the  server? 

A.  The  file  name  is  10canberral53  . 

Q.  And  do  you  recognize  that  naming  convention  through  your 
investigation? 

A.  Yes. 

Q.  And  what  is  that  naming  convention? 

A.  That  is  an  MRN . 

Q.  What  is  an  MRN? 
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A. 

Message  Record  Number. 

Q. 

And  where  have  you  seen  that  in  general? 

A. 

Through  this  case  and  on  the  NCD  website,  sir. 

Q. 

Now  is  there  a  file  type  associated  necess  —  like  on  this 

—  this  prosecution  exhibit  for  identification  with  what's  sitting  on 
the  web  server? 


A. 

No. 

Q. 

And  what  file  type  is  it  being  served  at? 

A. 

HTML. 

Q. 

How  do  you  know  that? 

A. 

Because  it  says  ways  Wget  space  dash  capital  0 

10canberral53 . html . 

Q.  Now  what  information  would  PFC  Manning  need  in  order  to 
create  this  Excel  document  with  Wget  commands  and  specific  web  pages 
on  the  web  server? 

A.  You  first  need  to  know  obviously  the  address  —  the  URL  of 
the  web  server  and  all  the  —  the  specific  path  to  the  files  and  a 
listing  of  the  files  he  would  like  to  have  downloaded. 


Q. 

Now  why  do  you  need  the  list  of  the  files  that  you  want  to 

download 

—  or  why  would  he  need  the  list  of  those  MRNs? 

A. 

If  you  —  he  needed  to  download  them.  He  wanted  to 

download 

them,  so  he  needed  a  list  of  what  to  download. 

Q. 

Would  Wget  worked  otherwise? 
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A.  I  don't  think  so  because  the  NCD  —  these  files  were  not 
linked  as  a  —  on  mass  to  the  front  web  page.  There  was  a  database, 
more  or  less,  in  the  back  end.  So  the  user  would  have  to  search  the 
NCD.state.sgov.gov  website  --  web  server  to  download  --  to  identify 
the  cables  they  wanted  to  download. 

Q.  And  in  order  to  obtain  the  information  of  the  actual  cables 
and  their  names  on  the  server,  what  would  PFC  Manning  need  to  be  able 
to  do  or  what  did  he  need? 

A.  He  needed  the  address.  He  needed  the  cable  names. 

Q.  And  did  you  find  any  evidence  of  —  of  how  he  obtained  the 
cable  names? 

A.  Yes. 

Q.  And  what  evidence  did  you  find  of  how  he  did  this? 

A.  On  Intelink.  There  was  a  search  from  the  .22  computer  to 
the  NCD.state.sgov.gov,  and  it  queried  --  was  like  a  search  of  new 
cables.  And  it  was  a  listing  —  and  it  provided  a  list  of  the 
hundred  cables  or  so. 

Q.  And  did  that  result  give  a  list  of  the  cable  name? 

A.  It  should  have,  yes. 

Q.  And  then  what  at  least  could  a  user  do  with  a  list  of  cable 
names? 

A.  In  this  case,  copy  them  and  then  place  them  into  Excel. 

Q.  Now  when  you  examined  this  Excel  worksheet,  or  excuse  me, 
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this  backup. XLXS  file,  what  did  you  observe  on  how  Private  First 
Class  Manning  created  these  Wget  commands? 

A.  If  you  notice,  sir  —  if  you  notice  at  the  top  that  says 
column  B.  Column  A  is  nothing  but  the  names  itself  with  no 
extensions  and  canbaras  —  canbaral53,  for  example.  What  happened  is 
—  this  is  a  —  this  is  a  function  of  Excel  and  concatenate  the 
contents  of  the  first  half  —  the  first  column,  which  were  just  be 
the  names  and  it  created  this  output. 

Q.  What  do  you  mean  by  concatenate? 

A.  Concatenate  is  a  Excel  function  to  put  pieces  together.  In 
this  case,  this  would  --  he  would  --  it  was  going  to  create  —  it  was 
going  to  put  Wget  dash  0,  and  then  it  had  —  instead  of  the  file  name 
of  this  one,  10canberral53 ,  it  actually  read  the  Column  A  and  then 
would  put  that  in  there  automatically  and  followed  by  . html,  and  then 
it  would  have  that  address  and  reference  and  then,  again,  it  would 
read  from  column  A  to  populate  this  field.  It  was  a  way  to  automated 
it? 

MJ:  Let  me  stop  you  there.  Where  do  you  get  the  information 

from  column  A? 

WIT:  We  just  --  that's  where  you  read  the  names.  So  you  would 
go  to  NCD,  you  would  search  for,  in  this  case,  newest  cables.  It 
would  say,  oh,  here  are  your  cables.  You  would  copy  that  list  of 
names,  populate  it  into. 
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Q.  And  —  and  just  that  —  that  last  portion,  how  would  —  how 
would  a  user  do  that?  You  have  a  web  page,  you  said,  and  you  have 
the  newest  100  cables?  What  would  you  do  on  the  computer  in  order  to 
get  it  into  Excel? 

A.  Highlight  it,  copy  it,  and  then  paste  it  into  Excel. 

Q.  And  then  once  you  paste  it  into  Excel  based  off  the 

formulas  in  Excel  what  would  happen  in  this  Column  B  that  we're 
looking  at? 

A.  This  would  populate  it.  It  would  then  create  the  Wget 
commands . 

Q.  Is  that  an  automated  process? 

A.  It  would  be,  yes. 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 
Prosecution  Exhibit  100  for  identification  as  Prosecution  Exhibit  100 
[handing  the  document  to  the  Military  Judge] . 

ADC [CPT  TOOMAN] :  No  objection,  ma'am. 

MJ:  Prosecution  Exhibit  100  for  identification's  admitted. 

Q.  Now  based  off  of  your  analysis  of  Private  First  Class 
Manning's  computer,  what  then  did  Private  First  Class  Manning  do  with 
that  Excel  spreadsheet  with  the  Wget  commands? 

A.  Sir,  you  mean  .22? 

Q.  I'm  sorry,  yes,  .22. 

A.  He  then  would  have  copied  Column  B  into  a  batch  file  and 


10628 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


© 


o 


then  run  the  command. 

Q.  Now  what  is  a  "batch  file?" 

A.  That  is  a  file  that  contains  a  linear  step  of  instructions 
for  programs  to  run  in  through  command  prompts.  By  linear,  I  mean, 
it  reads  the  first  one.  And  then  once  it's  done,  it  does  the  second 
line  and  third  line  and  so  on  until  it's  done. 

Q.  Now  why  would  a  batch  file  be  needed  in  order  to  run  Wget? 

A.  Because  in  this  matter  —  the  way  this  was  done  you  would 

have  to  either  run  them  as  a  —  in  mass  as  a  batch  file  or  copy  and 
paste  each  one  into  a  command  prompt,  hit  enter,  it  would  download 
copy  and  paste,  and  this  was  just  a  way  to  automate  it. 

Q.  And  what  final  type  is  associated  with  batch  files? 

A.  The  file  type  is  .bat. 

Q.  How  does  a  user  create  a  batch  file? 

A.  The  easiest  way  is  to  open  notepad,  which  is  a  text  editor, 
and  find  —  put  your  contents  in  there  and  then  save  it  as  a  file 
extension  .bat. 

Q.  Is  a  batch  file  a  graphical  user  interface? 

A.  It  is  not. 

Q.  What  is  it? 

A.  It  is  a  —  again,  it's  just  a  command  —  it's  a  series  of 
linear  steps  for  the  command  prompt  to  execute. 
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Q.  And  did  you  find  any  evidence  of  a  batch  file  being  used  by 
Private  First  Class  Manning? 

A.  I  did. 

Q.  What  did  you  find  in  the  unallocated  space? 

A.  In  the  unallocated  space  I  found  a  partially  deleted 
remnants  of  a  batch  file. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  now  handing  you 
Prosecution  Exhibit  190  for  identification  [handing  the  document  to 
the  witness] . 

Q.  Do  you  recognize  that  document? 

A.  [Looking  at  the  document]  I  do. 

Q.  And  how  do  you  recognize  that  document? 

A.  This  is  a  document  I  created.  This  is  an  extract  - 

ADC [CPT  TOOMAN] :  Your  Honor,  we've  just  seen  this  for  the  first 
time.  We'd  like  the  opportunity  to  talk  about  this  document  with  our 
expert . 

MJ:  All  right,  how  long  would  you  need? 

ADC [CPT  TOOMAN]:  15  minutes.  Your  Honor. 

MJ:  All  right,  any  objection. 

TC [MAJ  FEIN]:  No,  ma'am. 

MJ:  All  right,  the  Court  will  be  in  recess  for  15  minutes. 

Special  Agent  Shaver,  the  same  rules  apply. 

[The  court-martial  recessed  at  1637,  18  July  2013.] 
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[The  court-martial  was  called  to  order  at  1713,  18  July  2013.] 

[The  witness  was  on  the  witness  stand. ] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

parties  present  when  the  court  last  recessed  are  again  present  in 
court.  Major  Fein,  did  you  have  something  that  you  wanted  to  add  to 
the  record? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Earlier,  Your  Honor,  when  the  Court 
came  out  to  ask  a  question  about  the  641  offenses,  when  asked  —  when 
asking  the  United  States,  I  stated  that  the  Charge  Sheet  specifically 
stated  that  the  641  offenses  talked  —  or  state  that  a  database 
containing  —  this  is  for  the  CIDNE  641  offenses,  that  the  CIDNE 
contained  SIGACTS,  and  the  actual  Charge  Sheet  is  charged  that  is  the 
CIDNE  database  containing  the  records,  not  SIGACTS.  If  it  may  please 
the  Court  to  continue. 

MJ:  Go  head.  Let  the  record  reflect  the  witness  is  on  the 

witness  stand. 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  showing  you  Prosecution 
Exhibit  190  for  identification  [handing  the  document  to  the  witness] . 

Q.  Have  you  seen  this  document  before? 

A.  [Looking  at  the  document]  I  have. 

Q.  And  what  is  this? 

A.  This  is  a  screenshot  of  the  --  from  the  .22,  the  allocated 
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space.  It's  a  screen  —  this  is  something  I  created. 

Q.  And  how  do  you  recognize  it? 

A.  I  created  this. 

Q.  And  —  and  what  is  it  a  screenshot  of? 

A.  The  unallocated  space.  It  has  a  deleted  batch  file. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  the  court-martial  participants.] 

Q.  Now,  before  we  broke,  you  testified  about  the  use  of  batch 
files  and  the  different  places  you  found  evidence  about  —  of  batch 
files  being  run. 

TC [MAJ  FEIN]:  Excuse  me  one  moment. 

Q.  So  where  did  this  information  that's  on  this  exhibit  come 

from? 

A.  The  unallocated  space  within  .22. 

Q.  And  could  you  please  explain  for  the  Court  what  this 
extract  from  that  unallocated  space  shows? 

A.  It  shows  a  series  of  Wget  commands  downloading  a  number  of 
MRNs  —  Department  of  State  cables  from  the  Department  of  State 
server. 
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Q.  And  how  does  this  extract  compare  to  the  —  at  least 
format-wise  —  well,  and  content-wise  to  the  Wget  tab  on  the  backup 
XLXS  file? 

A.  It  has  the  same  content. 

Q.  And  what  do  you  mean  by  that? 

A.  And  the  same  —  same  format;  Wget  space  dash  capital  0 

space  message  record  number  . html,  the  web  address  to 

ncstate.sgov.gov  and  the  path,  and  finally  the  file,  which  is  going  - 
—  which  is  being  downloaded. 

Q.  And  why  do  you  conclude  that  this  is  a  recovered  batch  file 
from  his  .22  SIPRNET  computer? 

A.  Because  that's  what  a  —  what  a  batch  --  a  batch  script 
would  have  looked  like.  It's  just  a  linear  set  of  commands. 

Q.  And  when  a  batch  file  such  as  this  one  is  run,  what  does 
the  computer  do? 

A.  It  reads  the  first  line  and  executes  it,  and  then  the  next 
line,  and  continues  on  through  until  it  runs  out  of  commands. 

TC [MAJ  FEIN]:  Your  Honor,  United  States  moves  to  admit  what  has 
been  marked  Prosecution  Exhibit  190  identification  as  Prosecution 
Exhibit  190  [handing  the  document  to  the  Military  Judge] . 

ADC [CPT  T00MAN] :  No  objection,  ma'am. 

MJ:  Prosecution  Exhibit  190  is  admitted. 

Q.  Special  Agent  Shaver,  what  is  the  NTuser.dat  file? 
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A.  That  is  a  Window's  registry  file  that  is  —  pertains  to  a 
specific  user  on  a  Windows  computer. 

Q.  And  what  do  you  mean  by  a  "Windows  registry  file?" 

A.  This  is  a  file  that  every  user  —  every  user  account  on  the 
computer  has,  and  it  maintains  information  about  that  user  account. 
For  example,  the  last  ten  documents  —  the  Office  doc  —  Word 
documents,  that  is  maintained  within  your  NTuser.dat  file. 

Q.  Now  is  this  a  file  that's  generated  by  the  user  or  is  it 
automated  —  is  it  an  automatic  —  or  is  it  populated  automatically 
by  Windows? 

A.  It  is  an  automatic  file  populated  by  Windows. 

Q.  And  in  your  example  when  you  said  like  a  Microsoft  Office 
file,  is  it  —  is  it  a  general  Microsoft  office  file  or  is  it  by  file 
type? 

A.  It's  general  —  it's  by  file  type. 

Q.  And  what  information  does  it  log  when  it  comes  to  file 


types? 

A.  It  will  show  you  the  last  time  —  last  ten  times  that  file 
type  has  been  accessed. 

Q.  And  was  there  any  evidence  in  PFC  Manning's  NTuser.dat  file 
of  BAT  or  batch  files  being  run  on  his  SIPRNET  computer? 

A.  Yes. 

Q.  How  do  you  know  that? 
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A.  Within  the  .22  profile  —  .22  computer  on  the 
bradley .manning  user  profile,  I  examined  the  NTuser.dat.  In  there  it 
maintained  the  last  ten  batch  files  which  would  have  been  accessed. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  now  handing  you 
Prosecution  Exhibit  191  for  identification  [handing  the  document  to 
the  witness].  Would  you  please  look  at  that,  and  look  up  when  you're 
finished? 

WIT:  [Looking  at  the  document]  Yes,  sir. 

Q.  What  is  that  document? 

A.  This  is  a  document  I  created.  This  is  a  screenshot  of  the 
NTuser.dat  concerning  the  batch  files  —  the  last  ten  batch  files. 

Q.  What  do  you  mean  by  "concerning?" 

A.  That's  what  it  is.  These  are  the  last  ten  batch  files 
which  were  opened  and  saved. 

Q.  How  do  you  recognize  that  document? 

A.  I  created  it. 

TC [MAJ  FEIN]:  Thank  you.  Permission  to  publish.  Your  Honor? 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  So  starting  from  the  top  down,  could  you  please  explain  for 
the  Court  what  this  exhibit  reflects? 

A.  The  first  line  is  the  actual  key  —  the  registry  key  where 
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this  information  was  stored.  The  next  line  is  the  last  written  time 
that  key  had  been  updated. 

Q.  And  --  I'm  sorry,  what  do  you  mean  by  "key?" 

A.  The  registry  —  the  registry  stores  as  keys.  It's  a  — 
registry  files  is  a  —  it  maintains  files  and  information  by  the  use 
of  keys.  There  —  it's  like  a  database.  And  each  record  would  have 
its  own  information. 

Q.  And  what  is  the  key  that's  being  used  for  this  exhibit? 

A.  Well,  it's  located  —  the  —  it's  software  —  Microsoft 
Windows  current  version  Explorer  com  DLG  32  open  save  MRU  BAT . 

Q.  Now  what  does  the  "bat"  at  the  end  of  that  key  mean? 

A.  That  is  the  batch  files.  Anything  with  a  .bat  extension 

was  --  is  there  --  last  ten. 

Q.  And  now  what  about  the  last  written-in  class  name  at  the 
top  portion  of  this? 

A.  The  last  name  —  excuse  me,  the  last  written  time  is  the 
last  time  this  batch  file  registry  key  had  —  would  have  been 
updated.  What  that  means  is  the  last  time  that  something  —  a  batch 
file  had  been  opened  and  saved. 

Q.  And  now  what  does  the  first  line  under  name  type  and  data  - 
-  what  does  that  first  line  mean? 

A.  That  means  the  order  of  which  things  were  put  in. 

Q.  What  do  you  mean  by  "things  put  in?" 
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A.  The  —  the  registry  keys.  The  —  if  you  look  at  the  left 
it  says  MRU  list,  and  then  it  has  the  first  one  as  IGED,  as  you  read 
down,  if  you  look  from  left  to  right  under  the  top  data  field,  again, 
has  the  order  of  which  the  —  they  were  —  they  were  put  in  there.  A 
was  the  first,  B  was  the  last,  and  then  it  goes  up  to  I  as  being  the 
newest  document. 

Q.  And  then  what  does  the  information  show  below  that  first 
line  where  it  says  MRU  list  and  the  IGEDJAHD? 

A.  It  shows  you  the  path  of  the  batch  files  which  have  been 
viewed  —  or  run. 

Q.  What  did  you  mean  by  "path?" 

A.  The  path;  the  physical  location  on  the  hard  drive. 

Q.  And  what  —  what  did  your  observe  and  do  you  observe  about 
the  these  last  ten  bath  files? 

A.  They  were  all  run  from  the  bradley .manning  user  profile 
under  the  My  Documents  in  the  folder  bloop. 

Q.  And  how  does  one  determine  how  to  name  a  batch  file? 

A.  You  can  name  it  anything  you  want,  but  you  must  have  — 

should  have  —  have  the  extension  .bat. 

Q.  And  so,  for  example,  the  second  line  Golf,  what  does  that 
tell  you? 

A.  That  tells  me  the  file  move.bat  was  present  in  the  bloop 
folder. 
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Q.  And  why  does  it  tell  you  that? 

A.  Because  that  was  the  path  of  where  it  —  it  ran  from. 

TC [MAJ  FEIN]:  Thank  you.  Your  Honor,  the  United  States  moves 
to  admit  Prosecution  Exhibit  191  for  identification  as  Prosecution 
Exhibit  191  [handing  the  document  to  the  Military  Judge] . 

ADC [CPT  TOOMAN] :  No  objection. 

MJ:  Prosecution  Exhibit  191  is  admitted. 

Q.  Special  Agent  Shaver,  did  you  find  a  folder  on  Private 
First  Class  Manning's  SIPRNET  computer  that  contained  a  batch  file 
and  the  associated  files  pulled  using  Wget? 

A.  I  did. 

Q.  And  where  did  you  find  that? 

A.  Within  the  bradley .manning  user  profile  on  .22  and  the 
folder's  name  was  bloop. 

TC [MAJ  FEIN]:  Your  Honor,  I'm  retrieving  from  the  court 
reporter  Prosecution  104  for  identification  [retrieving  the  document 
from  the  court  reporter] . 

MJ:  It's  104.  Yes. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  now  handing  you 
Prosecution  Exhibit  104  for  identification  [handing  the  document  to 
the  witness] . 

Q.  Do  you  recognize  that  document? 

A.  [Looking  at  the  document]  Yes,  I  do. 
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Q.  And  what  is  that  document? 

A.  This  is  a  screenshot  of  the  EnCase  forensics  program  I  — 
and  I  created. 

Q.  Is  that  the  same  exhibit  you  referenced  in  your  previous 
testimony  with  Captain  Morrow? 

A.  Yes. 

TC [MAJ  FEIN]:  Permission  to  publish.  Your  Honor. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Now,  Special  Agent  Shaver,  could  you  please  explain  to  the 
Court  what  —  what  is  displayed  in  this  exhibit  that  you  pulled? 

A.  What  these  are  —  these  are,  again,  as  previous  testimony  - 
-  you  will  see  the  backup  .XLXS. 

Q.  Where  are  we  looking? 

A.  Six  up  from  the  bottom. 

Q.  Okay. 

A.  And  the  —  also  files.zip.  This  files.zip  was  the 
partially  corrupted  zip  file  we  spoke  of  earlier.  And  the  second 
from  the  bottom  is  move.bat;  that  is  the  batch  file. 

Q.  So  just  to  orient,  what  is  the  left  column? 

A.  The  column  with  the  file  name. 

Q.  What  is  the  right  column? 
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A.  That  was  the  —  the  file  creation  time. 

Q.  And  what  does  the  left  column  show? 

A.  It  shows  the  names  in  the  files  that  were  in  that  folder. 

Q.  And  what  else  —  what  type  of  information  is  contained  in 

that  folder  pulled  from  the  Department  of  State  server? 

A.  There  are  —  there  were  several  MRNs  --  deleted  MRNs  that 
are  there  and  the  files.zip  contains  over  10,000  MRNs  from  the 
Department  of  State  server. 

Q.  And  what  do  you  mean  by  deleted  MRNs? 

A.  They  are  —  have  been  deleted. 

MJ:  How  many  files  --  how  many- did  it  did  it  contain? 

WIT:  The  files.zip  contained  over  10,000. 

MJ:  Thank  you. 

Q.  And  what  do  you  mean  by  —  well,  first,  what  does  that 
symbol  next  to  the  MRN  represent? 

A.  If  you  look  at  the  first  one,  that  symbol  means  the  file 
has  been  deleted.  The  - 

Q.  What  is  the  —  I'm  sorry  to  just  interrupt  for  a  moment  — 
what  is  the  bigger  symbol  next  to  the  MRN? 

A.  It  had  been  filed.  It  shows  it's  a  file  and  it  shows  that 
it's  the  slash  line  through  it  means  it's  been  deleted. 

Q .  And  - 

MJ:  Now,  wait,  I'm  confused.  What  slash  line  through  it? 
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Q.  Could  you  use  your  screen  and  circle,  please? 

A.  I'll  try.  Right  there  [pointing  to  the  projection  screen]. 

MJ:  Oh,  in  the  —  okay,  got  it. 

Q.  So  are  you  —  are  you  talking  about  next  to  the  very  first 
entry  10ancra299.html  that  there  is  an  icon  that  looks  like  a  piece 
of  paper  with  a  circle  with  a  slash  through  it? 

A.  Correct. 

Q.  And  that's  what  you  just  circled? 

A.  Yes,  sir. 

Q.  And  what  do  you  mean  by  it  was  deleted? 

A.  The  file  has  been  deleted.  The  contents  —  the  contents  of 
the  file  is  —  has  been  deleted,  but  the  entry  within  the  master  file 
table,  the  MFT,  is  still  present. 

Q.  And  could  —  or  did  during  forensic  exams  remnants  of 
deleted  files  —  Department  of  State  files,  specifically,  were  they 
recovered? 

A.  Yes. 

Q.  And  then  you  talked  about  backup  .XLXS,  is  that  the  file 
you  were  —  you  testified  about  earlier? 

A.  Yes. 

Q.  Listed  there  —  and  then  what  about  move.bat? 

A.  That  is  a  batch  file.  It  has  been  deleted  and  the  contents 

has  been  overwritten.  I  do  not  know  what  the  exact  content  of  that 


10641 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


Q 


J 


was . 

Q.  And  what  folder  was  —  is  this  showing  the  contents  of? 

A.  The  file  —  the  file  —  folder  is  bloop. 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  movers  to  admit 
Prosecution  Exhibit  104  for  identification  as  Prosecution  Exhibit  104 
[handing  the  document  to  the  Military  Judge] . 

ADC [CPT  TOOMAN] :  No  objection. 

MJ:  Prosecution  Exhibit  104  for  identification's  admitted. 

Q.  So  when  Private  First  Class  Manning  was  running  Wget  in  his 
My  Documents  folder,  the  way  he  had  programmed  it,  where  did  the  file 
save  to? 

A.  The  same  folder  the  Wget  was  run  from. 

Q.  And  how  was  that  reflected  in  the  exhibit  that  was  just 
displayed? 

A.  The  Wget  files  were  there  —  the  HTML  files  that  would 
indicate  Wget  was  run  from  that  folder. 

Q.  And  would  it  be  in  the  same  folder  as  the  batch  file? 

A.  Yes. 

Q.  And  was  that  specific  move.bat  file  reflected  or  accounted 
for  in  the  NTuser.dat  file? 

A.  Yes. 

Q.  Was  running  Wget.exe  in  that  bloop  folder  captured  in  the 
prefetch  file? 
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A.  It  was. 

Q.  Now  if  Wget  was  run  from  a  CD  or  DVD,  how  would  that  be 
captured  within  the  same  files  you've  now  discussed,  if  at  all? 

A.  It  would  not  have  —  the  methodology  that  was  used  from  the 
backup. xlsx  it  would  not  have  worked  because  you  cannot  write  to  the 
CD.  You  would  have  to  write  to  somewhere  on  the  —  on  the  computer 
within  the  user  profile. 

Q.  Why  is  that? 

A.  Because  CDs  are  read-only.  You  need  to  --  Wget  knows  how  - 
-  Wget  can  download  a  file,  but  it  has  to  be  able  to  write  the  output 
to  something. 

Q.  What  if  it's  a  rewritable  CD? 

A.  Another  program  would  have  to  do  that.  Wget  does  not  have 
that  capability? 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Slide  Two  of 
Prosecution  Exhibit  187  for  identification. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  earlier  you  testified  that  —  as  a 
demonstrative  this  is  --  excuse  me,  let  me  zoom  out  [adjusting  the 
document  on  the  screen]  —  that  this  slide  you  created  shows  how  Wget 
could  run.  Using  the  same  demonstrative  exhibit,  could  you  please 


10643 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


c 


explain  how  PFC  Manning,  in  your  opinion,  ran  Wget  from  his  SIPRNET 
computer? 

A.  First,  he  would  have  downloaded  it  —  downloaded  from  the 
web  site  using  a  NIPRNET  computer.  In  this  case  .139.  The  file  was 
burned  to  a  CD,  transferred  over  to  the  SIPRNET  .22,  .40.  And  then 
it  was  then  placed  on  his  —  within  his  user  profile.  He  then 
navigated  to  NCD.state.gov  using  a  web  browser,  identified  the  cables 
that  he  wanted  to  download.  He  then  opened  up  —  backup. xlsx,  copy 
and  pasted  those  MRNs  into  that,  which  would  then  populate  the  field 
and  create  the  correct  command  line  for  Wget  to  operate.  He  would 
then  have  copied  the  Wget  —  all  the  commands  from  backup. XLSX  into  a 
batch  file  and  then  executed  had  batch  file. 

Q.  And  when  that  batch  file  executed,  how  did  Wget  retrieve 
the  web  page  from  the  web  server? 

A.  It  downloaded  the  file  by  navigating  directly  to  the  web 
server,  copying  the  file  from  the  web  server,  and  saving  it  locally 
as  an  HTML  file. 

Q.  So  using  your  —  your  aid,  what  path  did  it  follow? 

A.  The  request  went  up  the  red  line  from  the  bottom  left  to 
the  middle;  went  to  that  one,  and  then  it  navigated  to  the  files,  and 
then  the  return  path  would  have  been  to  a  local  machine. 

Q.  And  when  that  occurred  did  —  did  PFC  Manning's  computer  go 
on  to  the  Net-Centric  Diplomacy  web  page  that  you  visited  to  search 
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1  cables  for? 

2  A.  Wget  did  not,  no. 

3  MJ:  Wait.  Say  —  ask  that  question  again. 

4  TC [MAJ  FEIN]:  Yes,  ma'am. 

5  Q.  When  —  when  PFC  Manning  would  have  run  that  from  his 

6  SIPRNET  computer,  did  Wget  access  the  web  page  to  download  the  cables 

7  or  did  it  go  straight  to  the  server? 

8  A.  It  went  straight  to  the  server. 

9  TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 

10  Prosecution  Exhibit  187  for  Identification  as  Prosecution  Exhibit 

11  187. 

12  ADC [CPT  TOOMAN] :  Your  Honor,  we  would  object.  The  government 

13  has  asserted  that  it's  a  demonstrative  aid  and,  therefore,  not  proper 

14  for  admission. 

15  MJ:  May  I  see  it? 

16  [The  Trial  Counsel  handed  the  document  to  the  Military  Judge. 

17  MJ:  Why  isn't  a  demonstrative  aid  proper  for  admission? 

18  ADC [CPT  TOOMAN]:  Your  Honor,  it's  not  —  evidence  that's  just 

19  created  by  this  witness. 

20  CDC [MR.  COOMBS]:  And  additionally.  Your  Honor,  the  witness 

21  testified  that  it  would  aid  him  in  his  testimony.  So  this  is 

22  essentially  reinforcing  his  testimony  for  the  trier-of-fact .  It  was 

23  used  as  a  demonstrative  aid  as  he  was  testifying  in  order  to  explain 
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his  testimony  to  the  trial  counsel  —  to  the  trier-of-fact .  By 
admitting  this  this  would  —  this  is  not  evidence  in  the  case.  This 
is  simply  something  that  the  witness  created  on  their  own  in  order  to 
aid  their  testimony. 

MJ:  All  right,  demonstrative  evidence  can  be  admitted.  In  this 

case  I  don't  see  any  basis  for  the  defense  objection,  so  I'm  going  to 
go  ahead  and  admit  it  understanding  it's  demonstrative. 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  Special  Agent  Shaver,  I'd  now  like  to  direct  your  testimony 
to  —  to  evidence  you  found  of  Twitter  and  Tweets? 

MJ:  Yes  [speaking  to  the  defense]? 

ADC [CPT  TOOMAN] :  Your  Honor,  we're  going  to  object.  Again,  the 
government  gave  notice  that  they  would  elicit  testimony  about 
WikiLeaks  Tweets  that  were  found  on  the  accused's  personal  Macintosh 
computer.  No  WikiLeaks  Tweets  were  actually  found  on  PFC  Manning's 
Macintosh  computer.  And  we  believe  the  witness  would  say  the  URLs  or 
the  link  essentially  to  WikiLeaks  Tweets  were  found  on  the  computer. 
So  those  Tweets  weren't  actually  found  on  the  computer.  There's  no 
evidence  on  the  computer  that  PFC  Manning  ever  viewed  those  Tweets  or 
saw  those  Tweets.  There's  no  evidence  that  he  went  to  the  web  page. 
So  we  would  say  it's  not  —  it’s  not  appropriate  for  rebuttal.  In 
addition,  if  we  get  to  the  point  where  we  actually  see  the  Tweets, 
those  Tweets  —  we  were  told  the  purpose  of  them  is  to  rebut  the  idea 
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that  WikiLeaks  is  a  journalistic  organization.  Those  Tweets  have 
nothing  to  do  with  whether  or  not  WikiLeaks  is  a  journalistic 
organization. 

MJ:  Well,  the  Court  agrees  with  that.  But  what  are  you  trying 

to  elicit? 

TC [MAJ  FEIN]:  Your  Honor,  factual,  the  first  part  is  absolutely 
true,  and  Special  Agent  Shaver  will  testify  that  the  found  the  links 
to  these  Tweets,  and  then  he  went  on  to  Twitter  and  found  where  they 
were.  With  the  —  the  purpose  for  this  testify  is  exactly  as  we 
articulated  before,  the  United  —  or  the  defense  proffered  the 
evidence  from  Professor  Benkler  about  the  --  the  relationship 
WikiLeaks  has  to  the  —  the  press  —  as  a  press  entity,  and  we  intend 
to  offer  these  to  show  that  if  —  if  the  defense  intends  to  argue 
that  PFC  Manning  knew  that,  then  he  would  have  also  had  evidence  on 
there  that  shows  it  was  not.  And  these  Tweets,  as  the  Court  will 
see,  will  show  that,  or  least  provide  a  permissible  reasonable 
inference  that  it  was  not  a  legitimate  news  organization? 

ADC[CPT  TOOMAN] :  Our  position  on  the  substance  of  these  Tweets 
is  that  they  have  no  bearing  on  WikiLeaks'  relationship  to  the  media 
or  their  standing  as  a  journalistic  organization. 

MJ:  All  right.  Well,  I'm  going  to  overrule  that.  I'm  going  to 

let  it  in.  Go  ahead. 

Q.  Special  Agent  Shaver,  over  the  past  two  weeks  have  you  had 
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the  opportunity  to  search  Private  First  Class  Manning's  personal  Mac 
for  any  evidence  of  Twitter? 

A.  I  have. 

Q.  And  specifically  any  evidence  that  would  relate  back  to  the 
WikiLeaks  Twitter  feed? 

A.  Yes. 

Q.  And  where  did  you  find  evidence  that  you  talk  —  that  you 
answered  yes  to? 

A.  In  the  unallocated  space. 

Q.  Did  you  find  it  anywhere  else  as  well? 

A.  In  the  allocated,  yes. 

Q.  And  where  in  the  allocated  space? 

A.  Within  the  B.  Manning  user  profile  there  was  a  web  browser 
called  Safari.  Inside  there  there  was  a  database  that  contained 
information  to  those  link  files  —  or  files  pertaining  to  the 
substance. 

Q.  And  what  file  on  PFC  Manning's  personal  Macintosh  computer 
did  you  find  in  the  allocated  space  information  related  to  Twitter 
and  WikiLeaks? 

A.  It  was  a  web  icons . database . 

Q.  What  is  a  web  icons . database? 

A.  If  you  go  to  the  web  brow  —  if  you  open  up  a  web  browser, 
to  the  - 
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ADC [CPT  TOOMAN] :  Your  Honor,  we're  going  to  object.  Whether  or 
not  there  was  evidence  of  Twitter  or  WikiLeaks  on  PFC  Manning's 
computer  has  no  bearing  whatsoever  as  to  whether  or  not  WikiLeaks  is 
a  journalistic  organization. 

MJ:  Whether  WikiLeaks  is  a  journalistic  organization,  the 

relevant  inquiry  is  whether  PFC  Manning  believed  they  were,  right? 

ADC [CPT  TOOMAN]:  Perhaps,  Your  Honor,  but  whether  or  not  he  ever 
visited  Twitter  or  WikiLeaks,  that's  already  been  established  on  the 
merits,  and  it's  certainly  not  anything  that  we  offered  in  our  case 
in  chief.  And  so  it's  unclear  to  us  what's  being  rebutted. 

MJ:  I  disagree.  It's  proper  rebuttal  for  Mr.  Benkler's 

testimony.  Go  ahead. 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  So  what  is  web  icons . database? 

A.  That  is  the  database  that  --  of  — called  Favicons,  and 
those  are  URL  icons.  If  you  were  to  go  to  the  Washington  Post  web 
page,  to  the  left  —  in  the  address  bar,  to  the  left  of  it  would  be  a 
little  WP.  It's  a  way  of  branding  their  web  pages.  This  database 
maintained  those  —  of  websites  that  have  been  visited. 

Q.  And  —  and  is  this  database  populated  automatically  by  a 
Mac  or  by  Safari  or  is  it  done  by  the  user? 

A.  Populated  automatically  by  Safari. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  handing  you  what's  been 
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marked  as  Prosecution  Exhibit  192  for  identification  [handing  the 
document  to  the  witness] .  Would  you  please  review  that  and  look  up, 
please. 

[The  witness  did  as  directed.] 

Q.  What  is  that  document? 

A.  This  is  a  document  I  created.  This  contains  the  web  page 
icons  database. 

Q.  How  do  you  know  that? 

A.  I  created  this. 

Q.  Where  did  —  where  did  that  information  come  from? 

A.  It  came  from  the  file  called  --  a  file  located  in  the 
Macintosh  hard  drive.  The  path  is 
usersbmanninglibrarysaf ariwebpageicons . db . 

Q.  And  was  this  in  the  allocated  or  unallocated  space? 

A.  It  was  allocated. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish? 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  So,  Special  Agent  Shaver,  based  off  of  my  original 
question,  what  information  —  oh,  first  of  off,  what  information  on 
this  exhibit  did  you  —  did  you  pull  from  the  actual  file? 

A.  The  second  column  and  the  third  column. 
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Q.  And  what  are  the  column  names? 

A.  You  URL  and  Icon  ID. 

Q.  What  did  you  add  to  this? 

A.  I  added  the  —  the  title  above  and  the  line  numbers. 

Q.  Now  what  does  the  title  above  show? 

A.  The  path  of  the  file  as  it  was  located. 

Q.  Is  that  the  path  you  just  discussed? 

A.  It  is. 

Q.  And  then  what  does  the  number  reflect? 

A.  The  —  just  a  line  number. 

Q.  And  are  those  sorted  in  any  way? 

A.  That's  how  it  was  —  when  I  extracted  it,  that  is  the  order 

it  was  in. 

Q.  And  then  what  does  the  URL  column  show? 

A.  It  shows  a  path  to  a  web  site. 

Q.  And  —  go  ahead. 

A.  A  website  or  web  server  or  individual  article. 

Q.  And  what  does  the  icon  ID  column  tell  you? 

A.  This  goes  back  to  the  icons  I  spoke  of.  If  you  look  at  the 
Twitter;  all  the  Twitters  have  the  same  icon  ID  Number  Three  on  the 
right  —  they  all  have  the  same  icon.  So  Twitter  has  its  own  icon. 

Q.  And  what  does  a  user  of  Safari  on  a  personal  --  or  on  a 
Macintosh  have  to  do  in  order  to  have  this  database  populate  with  an 
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entry? 

A.  To  go  to  that  web  page. 

Q.  And  what  does  Line  4  state? 

A.  HTTP: //Twitter. com/WikiLeaks. 

Q.  And  what  is  that  website? 

A.  That  is  the  feed  for  —  the  WikiLeaks  feed  for  Twitter. 

Q.  Now,  is  that  the  feed  —  is  that  the  exact  path  of  the  feed 

today? 

A.  No,  sir. 

Q.  What  is  different? 

A.  Twitter  has  moved  from  HTTP  to  HTTPS. 

Q.  And  what's  the  --  in  very  general  terms,  what  is  the 
difference  between  HTTP  and  HTTPS? 

A.  "S"  adds  a  secure  socket  to  make  it  encrypted. 

Q.  And  what  does  Line  6  —  what  does  that  mean? 

A.  That  means  on  Twitter.com  a  search  was  conducted  for  the 

key  word  WikiLeaks. 

Q.  And  what  about  Line  7? 

A.  The  same. 

Q.  What  about  Line  8  and  9? 

A.  Line  8  is  a  web  page;  WikiLeaks.com,  path  —  there's  a 

folder  called  Wiki,  and  there's  a  document  of  —  apparently  was 
accessed  US_intelligence_plan  to  destroy  WikiLeaks  and  there's  a 
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date . 

Q.  What  about  Line  9? 

A.  Line  9  is  the  web  page  WikiLeaks.com/wiki/wikileaks. 

Q.  What  about  16  and  17? 

A.  Sixteen  is  a  web  page  —  Wikipedia  concerning  —  concerning 
Julian  Assange. 

Q.  And  line  17? 

A.  Line  17  is  a  Wikipedia  webpage  concerning  the  WikiLeaks. 

Q.  Now,  you  mentioned  the  Washington  Post  earlier.  Is  there 
any  evidence  here  that  PFC  Manning  also  visited  a  website  associated 
with  the  Washington  Post? 

A.  I  —  yes,  18. 

Q.  How  do  you  know  that? 

A.  The  path;  www.WashingtonPost.com. 

TC [MAJ  FEIN]:  Thank  you.  Your  Honor,  the  United  States  moves 
to  admit  Prosecution  Exhibit  192  for  identification  as  Prosecution 
Exhibit  192. 

ADC [CPT  TOOMAN] :  No  objection. 

M J :  Let  me  see  it. 

[The  Trial  Counsel  handed  the  document  to  the  Military  Judge.] 

MJ:  Prosecution  Exhibit  192  for  identification's  admitted. 

Q.  Special  Agent  Mander[sic],  a  moment  ago  before  the  Favicons 
database,  you  testified  that  you  found  evidence  of  the  WikiLeaks 
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Twitter  feed  in  both  the  unallocated  space  and  the  allocated.  What 
evidence  did  you  find,  in  general,  in  the  unallocated  space? 

A.  Several  unique  URLs  to  specific  -  twit  —  Twitter  Tweets 
pertaining  to  WikiLeaks. 

Q.  And  what  did  you  do  when  you  found  these? 

A.  I  went  to  the  computer  —  a  NIPRNET  computer,  and  I  put 
that  address  — 

MJ:  You  went  to  where? 

WIT:  To  a  NIPRNET  computer.  I  had  to  —  I  wanted  to  see  the 
contents  —  were  these  valid  Tweets.  And  so  I  went  to  the  webpage 
and  plugged  that  URL  in,  and  witnessed  the  results. 

TC [MAJ  FEIN]:  Special  Agent  Shaver,  I'm  handing  you  what's  been 
marked  as  Prosecution  Exhibits  194  Alpha,  Bravo  and  Charlie  [handing 
the  documents  to  the  witness] .  Would  you  look  at  those  and  look  up 
when  you've  finished. 

[The  witness  did  as  directed. ] 

Q.  Did  you  recognize  those  three  documents? 

A.  I  do. 

Q.  What  are  those? 

A.  These  are  in  EnCase  reports  concerning  the  mentioned  Tweets 
concerning  .Twitter.com  from  the  unallocated  space  of  PFC  Manning's 
personal  Macintosh  computer. 

Q.  Now  are  all  three  of  those  —  well,  how  did  you  —  are 
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those  documents  you  created? 

A.  They  are. 

Q.  And  how  did  you  create  those? 

A.  From  EnCase  I  created  a  report  based  upon  the  finding. 

Q.  And  is  that  the  report  for  all  three  of  them? 

A.  It  is. 

Q.  And  is  there  any  difference  —  what  are  the  differences 
between  those  three  pages? 

A.  Two  of  these  —  two  of  these  are  actual  direct  URLs  into  a 
specific  Twitter  on  WikiLeaks.  The  third  one  is  a  search  of 
Twitter.com  for  the  key  word  WikiLeaks. 

Q.  And  you  said  —  you  said,  I  think,  URL  for  —  for  Twitter 
on  WikiLeaks.  What  do  you  mean? 

A.  The  address  is  Twitter.com/WikiLeaks/status  and  a  unique 
number. 

TC [MAJ  FEIN]:  Permission  to  publish.  Your  Honor. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  I'm  publishing  Prosecution  Exhibits 
194  Bravo  and  Charlie.  Now  which  --  you  mentioned  there's  two 
different  types  of  the  unallocated  space  information  you  found. 

Which  one  is  this? 
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1  A.  These  are  actual  URLs  to  a  Tweet  that  was  recovered  that  — 

2  found  in  the  unallocated  space  of  the  personal  Macintosh  computer. 

3  Q.  How  do  you  know  that  each  of  those  are  URLs  for  Tweets? 

4  A.  I  put  that  address  into  a  web  browser  and  I  went  into  the 

5  Tweet  itself. 

6  Q.  And  did  those  two  addresses  when  you  put  into  a  web  browser 

7  pull  up  a  Tweet? 

8  A.  They  did. 


9 

Q. 

Different  Tweets? 

10 

A. 

Yes . 

11 

Q. 

Now  was  the  address  that  came  up  in  the  web  browser 

12 

identical 

to  the  address  on  these  two  documents? 

13 

A. 

No. 

14 

Q. 

What  was  different? 

15 

A. 

The  difference  was,  you  should  see  —  it's  site  http://. 

16 

Twitter  has  now  gone  to  https://. 

17 

Q. 

Was  everything  after  the  HTTPS  the  same  when  you  went  to 

18 

Twitter? 

19 

A. 

Yes . 

20 

Q. 

And  when  did  you  go  on  Twitter? 

21 

A. 

Past  couple  of  days. 

22 

Q. 

I'm  now  overlaying  Prosecution  Exhibit  194  Alpha  --  and  I'm 

23 

going  to 

be  zooming  out  [moving  the  document  on  the  projection 
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1  screen] .  Now  what  is  this  portion  that  you  recovered  from  the 

2  unallocated  space? 

3  A.  This  is  a  —  from  my  writing  —  you  can  read  it  is  a  search 

4  on  Twitter.com  and  key  word  was  WikiLeaks. 

5  Q.  And  how  do  you  know  the  key  word  was  WikiLeaks? 

6  A.  The  Q  equals  is  the  search. 

7  Q.  And  what  else  —  what  other  information  does  this  recovered 

8  on  unallocated  space  tell  you? 

9  A.  Off  to  the  right  there's  another  Tweet  identifier;  125  — 

10  starts  with  the  numbers  125  off  to  the  right. 

11  Q.  What's  the  whole  number,  please? 

12  A.  12558544922. 

13  Q.  How  do  you  know  that  —  you  call  that  a  unique  identifier, 

14  how  do  you  know  that? 

15  A.  I  put  that  into  —  again,  I  went  to  Twitter  and  put  that  in 

16  as  a  —  as  I'd  done  with  the  other  two,  and  a  Tweet  concerning 

17  WikiLeaks  was  there. 

18  Q.  Now  you  said  like  the  other  two  —  earlier  you  testified 

19  that  you  basically  copied  and  pasted  the  http: twitter  — 

20  //twitter. com  —  that  whole  thing  in  there,  did  you  copy  and  paste 

21  this  from  Prosecution  Exhibit  194  Alpha  into  Twitter? 

22  A.  No,  I  just  used  the  —  the  unique  identifier. 

23  Q.  And  then  what  else  did  you  combine  with  that  unique 
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identifier? 

A.  The  https  Twitter.com  WikiLeaks  status. 

Q.  And  what  occurred  when  you  put  that  into  the  Internet 
Explorer? 

A.  A  Tweet  concerning  WikiLeaks. 

Q.  Now  did  you  use  Internet  Explorer  or  Firefox? 

A.  Internet  Explorer. 

Q.  And  then  what  did  you  do  once  you  put  those  into  a  NIPRNET 
computer  and  brought  up  the  Tweets? 

A.  I  printed  them. 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  is  handing  Special 
Agent  Shaver  Prosecution  Exhibit  13  Alpha  through  Charlie  for 
identification  [handing  the  documents  to  the  witness] .  And  please 
review  those  and  look  up  when  you've  finished.  And  pulling  off  the 
projector  the  three  Exhibits  194  Alpha  through  Charlie  [taking  the 
documents  off  the  projection  screen] . 

[The  witness  did  as  directed.] 


Q- 

Do  you  recognize  those  documents? 

A. 

I  do . 

Q. 

What  are  those  documents? 

A. 

These  are  the  screenshots 

I  created , 

Q. 

And  how  do  you  recognize 

them? 

A. 

My  initials  are  on  them. 
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Q.  Do  you  recognize  them  by  the  contents  as  well? 

A.  [Reviewing  the  documents]  Yes. 

Q.  And  earlier  you  testified  that  you  used  Microsoft  Internet 
Explorer.  What  web  browser  did  you  use? 

A.  I  used  Firefox. 

Q.  And  how  do  you  know  that? 

A.  The  Firefox  tab  is  present. 

Q.  And  when  you  printed  those  —  or  what  else  —  what  else  do 
you  recognize  on  that  page? 

A.  The  background  is  the  WikiLeaks  logo. 

Q.  How  do  you  know  that? 

A.  I've  seen  it  throughout  this  investigation. 

TC[MAJ  FEIN]:  I'm  going  to  retrieve  from  you  those  exhibits 
[retrieving  the  documents  from  the  witness] .  Permission  to  publish. 
Your  Honor? 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen 
in  full  view  of  all  court-martial  participants.] 

Q.  So,  Special  Agent  Shaver,  I'm  going  to  publish  194  and 
portions  of  194,  also.  Your  Honor  —  Prosecution  Exhibit  - 

MJ:  Go  ahead. 

Q.  So  this  is  Prosecution  Exhibit  194  Alpha  for 
identification,  and  here  is  the  Tweet  that  is  Prosecution  Exhibit  193 
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Alpha  for  identification.  How  do  these  two  documents  relate  to  each 
other? 

A.  They're  the  same  unique  identifier. 

Q.  How  do  you  know  that? 

A.  Because  I  copied  that  unique  identifier  into  the  browser 
and  I  hit  enter  and  this  is  the  - 

Q.  When  you  say  that  what  —  were  you  - 

A.  I'm  sorry  - 

Q.  -  sure.  Describe  what  you're  talkinq  about. 

A.  -  off  to  the  right  you  see  the  number  125  - 

Q.  Which  —  which  first  is  it 

A.  -  I'm  sorry,  the  - 

Q.  -  the  unallocated  space  EnCase  image  or  is  it  the  Tweet? 

A.  In  the  unallocated  Encase. 

Q.  Okay. 

A.  It  says  12558544922. 

Q.  Yes. 

A.  I  copied  and  pasted  that  into  the  WikiLeaks  status  URL  and 
this  is  what  arrived  —  this  is  what  was  there. 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 
Prosecution  Exhibit  194  Alpha  and  193  Alpha  for  identification  as 
both  194  Alpha  and  193  Alpha. 

ADC [CPT  TOOMAN] :  We  do  object.  Your  Honor.  The  Court  has  said 
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it  is  relevant  —  those  things  that  informed  PFC  Manning's 
understanding  of  WikiLeaks.  This  witness  hasn't  testified  PFC 
Manning  actually  saw  those  Tweets.  All  he  said  was  there  were  links 

to  those  Tweets  on  his  computer.  The  witness  - 

MJ:  Then  you  can  argue  that  when  you  do  your  closing  argument. 

The  inference  could  be  there.  Any  other  objection? 

ADC [CPT  TOOMAN] :  No,  ma'am. 

MJ:  May  I  see  it? 

[The  Trial  Counsel  handed  the  documents  to  the  Military  Judge.] 

MJ:  Yes  [speaking  to  the  defense] ? 

CDC [MR.  COOMBS]:  Ma'am,  that's  an  overrule  on  the  objection? 

MJ:  Yes. 

[Pause] 

TC [MAJ  FEIN]:  Ma'am,  permission  to  publish  193  and  194  Bravo. 
MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  documents  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  similarly  how  do  these  two  documents 
relate  to  each  other? 

A.  The  —  in  the  unallocated  portion,  the  top,  you  can  see 
that  address,  the  status,  and  that  unique  identifier.  I  pasted  —  I 
put  that  to  the  —  I  went  to  Twitter.com  and  put  that  same  exact 
address  in,  and  what  appeared  was  the  one  below. 
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TC [MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 
Prosecution  Exhibit  194  Bravo  and  193  Bravo  for  identification  as 
both - 

MJ:  Any  objections? 

ADC [CPT  TOOMAN] :  Yes,  ma'am. 

MJ:  Overruled. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  194  Charlie  and 
193  Charlie. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  documents  on  the  projection  screen  in 
full  view  of  all  court-martial  participants.] 

Q.  Similarly,  Special  Agent  Shaver,  how  are  those  two 
documents  related? 

[The  witness  did  not  respond  to  the  question  asked.] 

ADC [CPT  TOOMAN]:  Ma'am,  assuming  our  objection  will  be 
overruled,  we  —  we  just  - 

TC [MAJ  FEIN]:  The  United  States  moves  to  admit  Prosecution  193 
Charlie  and  194  Charlie  for  identification  as  193  Charlie  and  194 
Charlie  [handing  the  documents  to  the  Military  Judge] . 

MJ:  All  right.  And,  defense,  just  for  the  record,  your 

objection  is  overruled.  I  understand  you  made  the  same  objection. 

ADC [CPT  TOOMAN]:  Thank  you.  Your  Honor. 

MJ:  Prosecution  Exhibits  193  Charlie  and  194  Charlie  are 
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admitted. 

Q.  Special  Agent  Shaver,  in  reference  to  our  searches  for 
Twitter  on  PFC  Manning's  personal  Macintosh,  why  did  you  or  your 
office  not  search  for  Twitter  related  information  prior  to  the  past 
few  days? 

A.  We  didn't  know  it  was  important. 

Q.  What  do  you  mean  by  that? 

A.  The  focus  of  the  exam  —  original  exams  was  to  find 
government  data;  State  Department  cables,  documents  related  to 
Guantanamo  Bay,  things  along  that  nature. 

Q.  Now,  I'd  like  to  focus  your  testimony  on  a  specific  email 
that  you've  pulled  as  part  of  the  forensic  exam'  in  the  last  few 
days.  Over  the  past  week  did  the  prosecution  ask  you  to  search 
Private  First  Class  Manning's  personal  computer  to  any  emails  related 
to  the  New  York  Times? 

A.  I  did. 

Q.  What  did  you  find? 

A.  I  —  I  found  one  message. 

Q.  And  how  did  you  find  it? 

A.  PFC  Manning's  computer  was  configured  to  use  the  - 

Q.  I'm  sorry  to  interrupt  real  guick.  What  computer  did  you 

use? 

A.  PFC  Manning's  personal  computer. 
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1  Q.  Okay,  please,  keep  going  about  the  configuration. 

2  M J:  Yes  [speaking  to  the  defense]? 

3  ADC [CPT  TOOMAN] :  Your  Honor,  before  we  —  before  we  go  further, 

4  the  substance  of  this  e-mail  doesn't  invoke  WikiLeaks  at  all. 

5  There's  no  explicit  reference  to  WikiLeaks,  it  doesn't  discuss  PFC 

6  Manning's  views  on  WikiLeaks.  An  email  to  the  New  York  Times,  in  our 

7  view,  doesn't  have  any  bearing  on  whether  or  not  WikiLeaks  is  a 

8  journalistic  organization. 

9  MJ:  May  I  see  the  email  when  I'm  in  my  interlocutory  capacity 

10  here? 

11  TC [MAJ  FEIN]:  May  I  have  a  moment.  Your  Honor. 

12  MJ:  Yes. 

13  [Pause] 

14  TC [MAJ  FEIN]:  Your  Honor,  although  there  are  two  documents  the 

15  United  States  intends  to  use,  they're  identical  except  for  the  way 

16  the  —  the  message  was  pulled.  I'm  handing  you  what's  been  marked  as 

17  Prosecution  Exhibit  195  Bravo  for  identification  [handing  the 

18  document  to  the  Military  Judge] .  Both  are  the  - 

19  [Pause] 

20  MJ:  What  is  the  point  of  this? 

21  TC [MAJ  FEIN]:  Your  Honor,  the  United  States  is  offering  this 

22  email  to  — to  rebut  the  inference  that  PFC  Manning  thought  WikiLeaks 

23  was  a  legitimate  news  organization  because  this  email  shows  that  if 
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1  he  had  identified  something  that  was  news  worthy  he  would  have 

2  actually  gone  and  he  tried  to  go  or  did  go  to  a  —  to  the  New  York 

3  Times.  So  if  the  —  if  the  defense  is  arguing  what  PFC  Manning  did 

4  or  didn't  know,  then  —  then  this  would  be  equally  permissible 

5  inference  that  he  knew  what  legitimate  was  and  that's  not  what  he 

6  used  it  for.  And  also  note  the  date.  Your  Honor,  dated  April  8th, 

7  which  is  —  the  United  States  will  of  course  argue,  if  it's  admitted, 

8  which  was  just  a  few  days  after  the  public  release  of  the  Apache 

9  video,  and  then  contacted  the  New  York  Times  about  it. 

10  MJ:  Why  is  it  in  the  rebuttal  case? 

11  TC [MAJ  FEIN]:  Your  Honor,  it's  in  because  the  defense  is  —  the 

12  defense  offered  the  idea  that  PFC  Manning  would  know  what  legitimate 

13  press  was  through  Professor  Benkler.  And  once  they  offered  that, 

14  Your  Honor,  then  the  United  States  is  rebutting  that  if  that  is  going 

15  to  be  the  inference  they  argue  that  a  —  in  rebuttal  that  he  knew 

16  what  it  actually  was  and  not  WikiLeaks.  And  his  actions  are  not  — 

17  are  not  consistent  with  that  argument.  But  until  —  until  the 

18  defense  makes  that  argument,  the  United  States  would  offer  it's  not 

19  even  relevant  at  that  point  —  for  that  reason. 

20  MJ:  I  don't  see  the  connection.  I'm  going  to  sustain  the 

21  objection  on  this  one. 

22  TC [MAJ  FEIN]:  Yes,  ma'am.  May  I  have  a  moment,  Your  Honor? 

23  MJ:  Yes. 
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[Pause] 

Questions  continued  by  the  trial  counsel  [MAJ  FEIN] : 

Q.  Special  Agent  Shaver,  I'd  now  like  to  direct  your  testimony 
to  a  SIGACT  —  a  specific  SIGACT.  Over  the  past  week  did  the 
prosecution  ask  you  to  search  Private  First  Class  Manning's  personal 
computer  for  information  related  to  an  Iraqi  publishing  incident 
concerning  propaganda  in  2010? 

A.  Yes. 

Q.  And  what  did  you  find? 

A.  Within  the  unallocated  space  of  PFC  Manning's  personal 
computer  —  personal  Macintosh  there  was  a  deleted  SIGACT. 

Q.  And  how  did  you  find  that  SIGACT? 

A.  Based  off  of  examination  of  volumes.txt  file,  I  was  able  to 

—  I  looked  down  and  these  —  the  —  I  was  told  the  SIGACT  involved  a 
printing  organization  —  a  printing,  and  some  people  were  arrested. 
Based  off  volumes.txt  there  was  —  there  was  text  files  saying 
arrested  —  things  along  that  nature.  And  based  —  in  that  same  — 
on  that  same  CD  that  was  burned  was  a  —  appeared  to  be  a  CIDNE  key  - 

-  a  CIDNE  tracking  key,  and  I  searched  for  that. 

TC [MAJ  FEIN]:  Your  Honor,  permission  to  publish  Prosecution 
Exhibit  127. 

MJ:  Go  ahead. 

[The  Trial  Counsel  placed  the  document  on  the  projection  screen  in 
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1  full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  do  you  recognize  this  document? 

A.  I  do. 

Q.  And  what  is  it? 

It  is  volumes.txt. 

Q.  And  very  quickly  and  generally  what  does  this  reflect? 

A.  This  is  the  —  this  is  the  CD  volumes  that  had  been 
8  accessed  and  recovered  from  the  unallocated  space  of  PFC  Manning's 
onal  Macintosh  computer. 

Q.  What  do  you  mean  by  "volume?" 

A  column  is  volume  is  a  CD  in  this  case.  It's  just  mounted 
accessed. 

And  then  what  is  the  numbers  after  volume  slash  and  then 
umbers? 

A.  That's  a  date/time  denotation.  So,  for  example.  Line  18  is 
16  March  4th,  2010,  at  2258,  that  is  was  burned. 

Q.  And  then  what's  the  last  part  of  that  —  what  does  that 
:e? 

A.  Line  18? 

Q.  Sure,  you  can  use  that  as  an  example. 

That  appeared  to  me  to  be  a  CIDNE  report  key. 

Q.  All  right,  but  in  general  what  is  it? 

A.  Those  are  the  files  on  a  CD. 
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Q.  So  what  did  you  do  with  volume.txt  in  order  to  find  this 
SIGACT  that  you've  created  to  talk  about? 

A.  I  looked  at  the  —  I  looked  at  that  —  I  saw  —  I  remember 
seeing  the  propaganda  translation  arrest,  propaganda  notes.  I 
thought  that  may  have  something  to  do  with  it,  and  I  —  again,  I 
noticed  that  —  what  appeared  to  be  a  CIDNE  tracking  key,  which  is 
line  18.  I  then  used  that  as  a  search  —  a  key  word  search  of  the 
unallocated  space,  and  I  was  able  to  locate  the  document  in  question. 

Q.  And  what  computer  did  you  located  it  on. 

A.  PFC  Manning's  personal  Macintosh  computer. 

TC [MAJ  FEIN]:  I  now  want  to  hand  you  what's  been  marked  as 
Prosecution  Exhibit  196  for  identification,  but  I'm  going  to  move 
this  cover  in  front  of  you  [moving  the  classified  document  cover  in 
front  of  the  witness].  I'm  handing  you  Prosecution  Exhibit  196 
[handing  the  document  to  the  witness] .  Would  you  please  keep  that 
low,  look  at  that,  and  look  up  when  you're  finished. 

[The  witness  did  as  directed. ] 

WIT:  Yes,  sir. 

Q.  What  is  that? 

A.  This  is  the  recovered  SIGACT  that  I  spoke  of. 

Q.  And  how  do  you  recognize  it? 

A.  This  is  an  EnCase  report  of  that.  This  is  something  I 

created  and  my  initials  are  on  it. 
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Q.  And  where  was  it  located? 

A.  In  the  unallocated  space  of  PFC  Manning's  personal 
Macintosh  computer. 

TC[MAJ  FEIN]:  Your  Honor,  the  United  States  moves  to  admit 
Prosecution  Exhibit  196  for  identification  as  Prosecution  Exhibit 
196. 

ADC [CPT  TOOMAN] :  No  objection. 

MJ:  May  I  see  it,  please? 

TC [MAJ  FEIN]:  We'll  put  in  a  folder  and  just  hand  it  to  the 
Court  [doing  as  directed  and  handing  the  document  to  the  Military 
Judge] . 

MJ:  Prosecution  Exhibit  196  for  identification's  admitted. 

TC [MAJ  FEIN]:  Thank  you.  Special  Agent  Shaver.  Your  Honor,  no 
further  questions. 

MJ:  Defense? 

CROSS-EXAMINATION 

Questions  by  the  assistant  defense  counsel  [CPT  TOOMAN] : 

Q.  We  meet  again.  Special  Agent  Shaver. 

A.  Yes,  sir. 

Q.  Agent  Shaver,  let's  start  off  by  talking  about  WikiLeaks  — 
or  about  Wget? 

A.  Yes,  sir. 

ADC [CPT  TOOMAN]  I'd  like  to  retrieve  Prosecution  Exhibit  100, 
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1  please  [retrieving  the  document  from  the  court  reporter] . 

2  [Pause] 

3  ADC [CPT  TOOMAN]:  Ma'am,  permission  to  publish? 

4  MJ:  Go  ahead. 

5  [The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 

6  screen  in  full  view  of  all  court-martial  participants.] 

7  Q.  Now,  Agent  Shaver,  what  we  see  on  Prosecution  100  are 

8  essentially  the  links  to  the  NCD  database,  correct? 

9  A.  Yes. 

10  Q.  And  if  one  wanted  to  go  view  --  we'll  just  look  at  the  very 

11  top  line  here  —  Line  10926.  If  one  wanted  to  view  that  10cambaral53 

12  cable,  they  would  put  —  what  would  they  put  into  —  into  their 

13  machine  —  into  their  web  browser? 

14  A.  You  would  start  from  where  it  starts  HTTP,  and  would  you 

15  copy  that  all  the  way  through  153  and  put  that  in  their  web  browser. 

16  ADC [CPT  TOOMAN]:  Removing  Prosecution  Exhibit  100  [removing  the 

17  document  from  the  projection  screen]  and  returning  that  to  the  court 

18  reporter  [returning  the  document  to  the  court  reporter] . 

19  MJ:  187. 

20  ADC [CPT  TOOMAN]:  I'm  retrieving  Prosecution  Exhibit  187 

21  [retrieving  the  document  from  the  Military  Judge] .  Permission  to 

22  publish,  ma'am? 

23  MJ:  Yes. 
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[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  Now,  Agent  Shaver,  when  you  talked  on  direct,  you  talked 
about  the  process  through  which  one  would  get  cables  from  the  NCD, 
right? 

A.  Yes. 

Q.  And  one  of  the  ways  of  what  you  talked  about  was  someone 
going  to  the  web  page,  so  basically  the  NCD  home  page? 

A.  Yes. 

Q.  And  once  they  got  to  the  NCD  home  page  they  could  do  a 
search? 

A.  Yes. 

Q.  And  then  once  they  did  a  search  they  might  see  a  number  of 
links  come  up,  correct? 

A.  Correct. 

Q.  And  they  could  click  on  that  link,  correct? 

A.  Yes. 

Q.  And  then  that  link  would  take  them  to  a  page? 

A.  Sure. 

Q.  Perhaps  that  Cambera  cable  we  just  talked  about? 

A.  Yes. 

Q.  Now  if  a  person  knew  the  URL  for  Cambera  —  for  that 
Cambera  cable,  they  could  just  type  that  directly  into  their  browser. 
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wouldn't  they? 

A.  Correct. 

Q.  So  a  user  doesn't  have  to  go  to  the  home  page  --  the  NCD 
home  page  in  order  to  access  the  cable? 

A.  Correct. 

Q.  So  if  I  —  if  we  —  you  just  talked  about  that  URL  that  was 
pretty  long,  but  if  I  just  typed  that  into  my  URL  —  or  into  my  web 
browser,  I'd  go  to  that  Cambera  cable? 

A.  You  would. 

Q.  So  I  don't  have  to  go  to  that  home  page  in  order  to  get  to 
that  Cambera  cable? 

A.  Correct. 

Q.  And  the  naming  convention  for  Department  of  State  cables  is 
the  same  for  every  one  --  for  those  web  pages  —  the  same  for  every 
one? 

A.  As  far  as  I  know. 

Q.  The  NCD  up  to  the  MRN? 

A.  Yes. 

Q.  And  then  you  put  in  the  MRN.html  and  you  get  to  the  cable? 

A.  Correct. 

Q.  Now,  you  talked  about  the  process  through  which  PFC  Manning 
got  these  cables  and  you  said  that  what  he  did  was  he  went  to  the 
home  page,  right?  He  went  to  the  NCD  home  page,  is  that  correct? 
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A.  Yep. 

Q.  And  did  some  sort  of  search  to  find  the  most  recent  cables? 

A.  Yes. 

Q.  And  he  copied  that? 

A.  I'm  assuming  --  on  that  one  I'm  assuming. 

Q.  Okay.  So  he  would  have  done  a  copy  Control  C  - 

A.  Something. 

Q  -  Control  V  --  pasted  it  into  Excel? 

A.  Correct. 

Q.  Okay.  And  that  Excel  document  is  what  you  used  in  order  to 
help  him  write  whatever  script  - 

A.  Right. 

Q.  -  that  he  used  in  Wget?  Now  you  testified  on  direct 

that - 

ADC [CPT  TOOMAN] :  And  I'm  going  to  flip  over  here  to  Page  Two  and 
publish  that  [doing  as  indicated].  If  I  may,  ma'am. 

MJ:  Proceed. 

Q.  Wget  can  just  go  directly  to  the  server,  right? 

A.  Correct. 

Q.  But  it's  also  possible  —  now  I'm  going  to  put  Page  One 
back  up  [doing  as  directed]  —  that  a  user  could  go  to  the  home  page, 
copy,  paste,  right  —  they  could  go  to  the  home  page  and  do  the 
search  and  pull  up  the  cables.  They  can  have  the  home  page  up.  They 
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1  could  copy  that  information  and  put  it  into  their  Excel,  correct? 

2  A.  Yes. 

3  Q.  Put  it  into  Wget,  and  while  the  web  browser's  still  open 

4  run  Wget,  correct? 

5  A.  Correct. 

6  Q.  And  there's  no  evidence  to  suggest  that  PFC  Manning  didn't 

7  do  that,  correct?  You  can't  say  that  he  didn't  have  the  NCD  database 

8  open  when  he  was  running  Wget? 

9  A.  That's  correct. 

10  ADC [CPT  TOOMAN] :  Removing  Prosecution  Exhibit  187  and  returning 

11  that  to  the  court  reporter  [removing  the  document  from  the  projection 

12  screen  and  returning  it  to  the  court  reporter] . 

13  MJ:  Now,  I'm  going  to  stop  you  for  just  a  minute.  That  was 

14  fast,  too. 

15  WIT:  Sorry,  ma'am. 

16  M J:  So  explain  to  me  what  you  —  what  path  your  —  you  just 

17  described  for  Wget  once  again. 

18  ADC [CPT  TOOMAN]:  Sure.  Yes,  ma'am.  You  want  me  to  go  through 

19  the  questions  again? 

20  MJ:  Yes. 

21  ADC [CPT  TOOMAN]:  Okay,  I'll  retrive  Prosecution  Exhibit  187 

22  [retrieving  the  document  from  the  court  reporter] .  Thank  you.  And 

23  publish,  ma'am? 
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MJ:  Yes. 

[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  Agent  Shaver,  you  talked  about  the  process  through  which 
PFC  Manning  got  the  MRNs,  correct? 

A.  Correct. 

Q.  And  the  process  was  going  to  NCD  home  page? 

A.  Yes. 

Q.  Do  a  search  for  the  most  recent? 

A.  Yep. 

Q.  Find  out  what  those  are? 

A.  Yes. 

Q.  They're  —  at  that  point  they're  on  the  screen? 

A.  Yes. 

Q.  There's  a  list  of  MRNs  on  the  screen,  correct? 

A.  Yes. 

Q.  Highlight  'em,  past  them  into  Excel? 

A.  Correct. 

Q.  Then  using  Excel,  PFC  Manning  would  have  written  whatever 
script  he  was  going  to  use  in  Wget? 

A.  Correct. 

Q.  And  then  Wget  would  have  ran  and  done  its  thing  and  got  the 
cables? 
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A.  Correct. 

Q.  Now,  when  that  was  happening  the  NCD  home  page  could  have 
been  open? 

A.  Yes. 

Q.  And  there's  no  evidence  in  your  analysis  of  PFC  Manning's 
Mac  computer  to  suggest  that  he  didn't  have  the  NCD  home  page  open 
when  he  ran  Wget? 

A.  Sir,  do  you  the  mean  .22? 

Q.  I'm  sorry,  thank  you.  Yes,  the  .22.  So  there's  no 
evidence  on  the  .22  machine  that  when  PFC  Manning  was  running  Wget 
the  NCD  home  page  wasn't  open? 

A.  Correct,  because  internet  history  was  set  to  be  cleared. 

Q.  Okay.  So  anything  —  it's  quite  possible  that  PFC  Manning 
did  the  copy,  had  NCD  open,  pasted  it  into  Excel,  got  it  into  Wget 
and  ran  Wget  while  he  was  still  on  the  NCD  home  page? 

A.  Correct. 

Q.  Or  on  the  NCD  search  results? 

A.  Yes. 

ADC [CPT  TOOMAN] :  Okay.  Removing  Prosecution  Exhibit  187  for  — 
Prosecution  Exhibit  187  and  returning  it  to  the  court  reporter 
[removing  the  document  from  the  projection  screen  and  returning  it  to 
the  court  reporter] . 

Q.  Now,  you  talked  briefly  on  direct  about  something  called 
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HBSS .  What  was  HBSS  —  what  does  that  stand  for? 

A.  Host  Based  Security  System. 

Q.  And  you  said  on  direct  that  HBSS  had  the  ability  to  prevent 
the  user  from  running  an  executable  file? 

A.  Yes. 

Q.  A  self-executable  file  could  have  been  prevented  by  HBSS? 

A.  Yes. 

Q.  And  you  also  said  that  HBSS  was  in  the  possession  of  the 
Army  at  the  time  all  of  this  happened? 

A.  Yes. 

Q.  The  Army  had  it? 

A.  Yes. 

Q.  And  the  Army  could  have  put  on  it  all  the  systems  —  it  was 
software  we  had? 

A.  Yes. 

Q.  And  if  the  Army  had  wanted  to  they  could  have  set  it  up  so 
that  a  user  couldn't  run  a  self-executable  file? 

A.  Correct. 

Q.  And  the  Army  didn't  do  that? 

A.  Not  to  my  knowledge. 

Q.  I  would  like  to  retrieve  Prosecution  Exhibit  188,  please 
[retrieving  the  document  from  the  court  reporter] . 

ADC[CPT  TOOMAN] :  Permission  to  publish.  Your  Honor? 
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M J :  Go  ahead. 

[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  Special  Agent  Shaver,  this  is  Prosecution  Exhibit  188  and 
these  are  prefetch  files,  right? 

A.  Correct. 

Q.  And  what  the  prefetch  files  tell  us  are  basically  that  a 
program  was  run? 

A.  Yes. 

Q.  Okay.  And  we  see  in  —  I  guess  the  fourth  column  we  see 
the  date  that  it  was  last  run? 

A.  Correct. 

Q.  Now  what  we  don't  know  from  the  prefetch  files  how  long  the 
program  ran,  correct? 

[No  response  from  the  witness.] 

Q.  So  we  don't  know  if  the  program  - 

MJ:  Well,  the  witness  hasn't  answered. 

A.  That's  not  quite  right,  sir. 

Q.  Can  --  can  you  tell  from  the  prefetch  files  if  the  program 
ran  for  30  seconds  or  it  ran  for  a  minute? 

A.  I  can  tell  from  the  prefetch  that  they've  got  —  like  a  — 
it  ran  --  how  many  times  it  ran.  So  in  the  case  of  the  last  one 
bloop  —  Number  20,  excuse  me,  it  was  only  run  one  time.  And  so  you 
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have  a  date  it  was  created  —  was  that  time,  and  the  date  it  was  last 
run  would  be  the  ending  time. 

Q.  Sure. 

A.  So  in  that  case,  yes. 

Q.  Okay,  you  can  tell  how  long  this  one  ran? 

A.  Because  it  only  ran  one  time. 

Q.  Now  —  when  —  Number  20  —  so  we  see  it  started  at  2010 
on  3  May  and  it  ran  until  02  of  May  4  - 

A.  Yes. 

Q.  -  right?  There  are  no  other  instances  of  Wget  running 

at  that  time,  correct? 

A.  Correct. 

Q.  And  so  let's  just  look  at  Number  One.  When  it  ran  on  1 
April  at  12:21:08,  you  don't  know  how  long  it  ran,  do  you? 

A.  Correct. 

Q.  And  — so  you  don't  know  if  while  it  was  running  there  was 
another  instance  of  it  running? 

A.  There  is  —  I  mean  —  the  dates  and  times  of  when  the  files 
were  created  —  if  you  look  at  the  —  the  first  line  again  —  if  you 
look  at  the  first  created  date,  the  created  time  is  13:48:34 
followed  by  13  —  the  next  line  is  13:48:40;  that's  a  few  seconds 
apart.  As  —  and  you  continue  going  down,  they're  seconds  apart  from 
each  other. 
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Q.  Sure.  But  it's  possible  that  that  ran  for  five  seconds? 

A.  It  is  possible. 

Q.  And  then  the  next  one  opened  up  at  40,  and  that  ran  until 
48:44,  and  the  third  one  opened  up? 

A.  It  is  possible. 

ADC [CPT  TOOMAN] :  Removing  Prosecution  Exhibit  188  [removing  the 
document  from  the  projection  screen].  I'd  like  to  retrieve 
Prosecution  Exhibit  189  [retrieving  the  document  from  the  court 
reporter].  Permission  to  publish,  ma'am. 

MJ:  Go  ahead.  We'll  make  this  easy;  you  can  publish  anything 

that's  been  admitted. 

ADC [CPT  TOOMAN]:  Thank  you,  ma'am. 

[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  All  right.  Agent  Shaver,  Prosecution  Exhibit  189  is 
basically  the  help  file  or  instructions  on  different  things  you  can 
do  with  Wget,  correct? 

A.  Correct. 

Q.  Now,  I  want  to  direct  your  attention  down  to  the  last 
section  there;  HTTP  options? 

A.  Okay. 

Q.  Okay.  Now  if  we  look  under  there  you  would  say  that  it  was 
possible  Wget  —  to  set  Wget  up  so  that  if  you  are  accessing  or  if 
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you  were  going  to  a  website  that  required  a  password  and  a  user  name 
you  could  set  Wget  up  to  provide  that  password  and  user  name? 

A.  Correct. 

Q.  And  so  if  on  the  NCD  database  a  user  needed  to  put  in  a 

user  name  and  a  password  to  get  access  you  could  have  done  that  on 
Wget? 

A.  Correct. 

Q.  Now,  you  talked  about  sort  of  batch  files  or  the  script 
that  was  run  by  PFC  Manning  on  the  .22  machine.  You  didn't  see 
anything  where  there  was  a  user  name  or  password  included  in  the 
scripts,  correct? 

A.  Correct. 

Q.  And  why  wouldn't  there  have  been  a  user  name  or  password  in 
the  scripts? 

A.  It's  not  required. 

ADC [CPT  TOOMAN] :  Okay.  So  —  removing  Prosecution  Exhibit  189 
[removing  the  document  from  the  projection  screen] . 

Q.  So  it  wasn't  required  because  once  an  individual  logged  on 
to  their  SIPR  machine  they  had  access  to  the  Net-Centric  Diplomacy 
database? 

A.  Correct. 

Q.  They  didn't  have  to  put  any  other  information  in  their 
computer  at  any  time  to  get  the  Net-Centric  Diplomacy  database? 
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A.  Correct. 

ADC [CPT  TOOMAN] :  If  we  could  retrieve  Prosecution  Exhibit  191 
[retrieving  the  document  from  the  court  reporter] .  Publish,  Your 
Honor? 

[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  Now,  Agent  Shaver,  you  testified  about  a  number  of  batch 
files . 

A.  Correct. 

Q.  I'd  like  to  talk  about  little  bit  more  about  what  exactly  a 
batch  file  is.  Now  within  a  batch  file  there  are  a  series  of 
commands,  correct? 

A.  Correct. 

Q.  There's  multiple  lines  within  the  batch  file? 

A.  Yes. 

Q.  And  each  one  of  those  lines  is  a  command  or  an 
introduction? 

A.  Correct. 

Q.  So  within  —  let's  just  look  at  "I"  up  there  —  or  let's  — 
let's  actually  look  at  "E"  — Echo.  Within  that  BAT  file  there  were  a 
number  of  introductions  or  commands? 

A.  Okay. 

Q.  Is  that  - 
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A.  There  could  be. 

Q.  Okay.  Well,  that's  what  a  batch  file  is,  right? 

A.  Yes. 

Q.  And  what  would  you  expect  to  see  in  there,  since  these  were 
the  batch  files  used  to  get  the  cables,  you  would  expect  to  see  that 
Wget  instruction  in  there,  correct? 

A.  Correct. 

Q.  And  you  would  expect  to  see  each  line  would  be  a  different 
instruction? 

A.  Yes. 

Q.  So  the  first  line  might  be  to  get  —  using  MRNs  that  we're 
just  going  to  make  up  —  09Viennal.  That  would  be  the  first  cable 
from  Vienna  in  2009  and  the  next  line  would  be  09Vienna2  — 

A.  Sure. 

Q.  --  possible? 

A.  Yes,  sir. 

Q.  And  then  when  one  actually  ran  the  BAT  file  what  would 
happen  is  Wget  would  go  and  then  get  09Viennal,  right? 

A.  Yes. 

Q.  And  then  after  it  got  09Viennal,  it'd  go  back  and  get 
09Vienna2  - 

A.  Correct. 
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Q.  -  because  that  was  the  next  line.  And  it  would  go 

through  until  all  of  the  instructions  were  done? 

A.  Correct. 

Q.  And  it's  doing  them  one  at  a  time? 

A.  Yes. 

Q.  And  that’s  why  when  you  testified  on  the  merits,  you  talked 
—  we  talked  about  firewall  logs,  right? 

A.  Yes. 

Q.  DOS  firewall  logs.  And  when  we  looked  at  those  DOS 
firewall  logs,  there  are  hundreds  of  thousands  of  connections? 

A.  Correct. 

Q.  Between  the  .22  machine  and  the  .40  machine  and  Department 
of  State.  And  the  reason  there  were  so  many  connections  was  because 
these  were  coming  in  one  at  a  time? 

A.  Yes. 

Q.  When  those  batch  files  run  it’s  not  downloading  two  or 
three  cables  at  a  time? 

A.  It’s  doing  the  first  command,  completing  it,  and  then  the 
second  command. 

Q.  Now  I  just  want  to  talk  sort  of  generally  big  picture  about 
Wget.  Wget  is  a  program  that’s  available  in  the  open  source, 
correct? 

A.  Correct. 
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Q.  And  it's  not  a  program  that's  known  for  being  synonymous 
with  hackers,  correct? 

A.  It  could  be. 

Q.  It  could  be,  but  it's  not  necessarily? 

A.  Correct. 

Q.  It's  used  for  purposes  by  a  lot  of  different  people? 

A.  Yes. 

Q.  And  a  lot  of  those  people  aren't  hackers? 

A.  Yes. 

ADC [CPT  TOOMAN] :  Can  I  have  a  moment.  Your  Honor? 

MJ:  Yes. 

[Pause] 

Q.  Special  Agent,  I  want  to  talk  now  about  the  Tweets. 
Actually,  before  we  go  to  the  Tweets,  I  want  to  talk  about  the 
Favicons . 

ADC [CPT  TOOMAN]:  If  I  could  retrieve  Prosecution  Exhibit  192 
[retrieving  the  exhibit  from  the  court  reporter] .  Publishing 
Prosecution  Exhibit  192  —  oh,  I'm  removing  Prosecution  Exhibit  191 
[removing  the  document  from  the  projection  screen  and  handing  it  to 
the  court  reporter],  and  publishing  192. 

[The  Assistant  Defense  Counsel  placed  the  document  on  the  projection 
screen  in  full  view  of  all  court-martial  participants.] 

Q.  Now  you  talked  about  finding  these  Favicons  in  the 
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allocated  space,  right? 

A.  Correct. 

Q.  And  generally  speaking  the  —  the  allocated  space  are  the 
nondeleted  things? 

A.  Correct. 

Q.  And  when  we  talked  yesterday  you  told  me  that  it's  possible 
to  have  a  Favicon  on  your  computer  without  ever  having  visited  the 
site,  correct? 

A.  No. 

Q.  No? 

A.  No,  sir. 

Q.  Okay.  But  even  if  there  was  a  Favicon  present  on  the 
computer,  you  don't  know  if  the  person  actually  visited  the  site  -- 
actually  saw  it? 

A.  That's  part  of  the  code  actually  of  HTML.  So  I  would  have 
to  say,  no,  sir. 

Q.  So  it's  possible  that,  you  know,  there  are  times  when 
you're  reading  something  in  the  news  and  you  click  on  a  link  and  the 
link  opens  up  in  a  new  tab,  right? 

A.  Yes,  sir. 

Q.  And  then  you  just  forget  about  it  --  you  forget  that  it's 
there,  right? 

A.  Yes,  sir. 
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Q.  You  close  it  —  you  close  your  browser,  it's  gone? 

A.  Yes,  sir. 

Q.  You  never  saw  that  article? 

A.  Correct. 

Q.  That  article  is  open  on  your  computer,  right? 

A.  Yes,  sir. 

Q.  And  if  that  article  and  that  website  had  had  a  Favicon  that 
would  be  in  your  allocated  space? 

A.  It  would  be. 

Q.  But  you  didn't  actually  see  the  article? 

A.  That's  correct. 

Q.  And  while  there  are  these  Favicons,  you  don't  actually  know 
when  —  if  it  was  viewed,  you  can't  say  when  it  was  viewed? 

A.  Correct. 

ADC [CPT  TOOMAN] :  Removing  Prosecution  Exhibit  192  [removing  the 
document  from  the  projection  screen] . 

Q.  Okay,  let's  talk  about  the  Tweets.  Tweets  —  again,  you 
found  URLs,  correct? 

A.  Correct. 

Q.  In  the  unallocated  space? 

A.  Yes. 

Q.  Now,  when  you  searched  the  unallocated  space  you  searched 
for  Twitter? 
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A.  Yes. 

Q.  You  found,  I  think  you  said,  11  instances  of  Twitter  in  the 
unallocated  space? 

A.  Twitter  and  WikiLeaks. 

Q.  Twitter  and  WikiLeaks.  Okay.  And  I  want  to  just  talk 
about  the  instances  of  Twitter,  okay? 

A.  Okay. 

Q.  You  didn't  find  —  well,  actually  all  you  found  related  to 
Twitter  in  the  unallocated  space  were  those  URLs,  correct? 

A.  Correct. 

Q.  When  you  searched  the  unallocated  space  both  previously  — 
years  ago  —  and  then  most  recently  this  week  or  last  week  you 
recovered  a  number  of  web  pages,  right? 

A.  Correct. 

Q.  And  none  of  those  web  pages  were  Twitter.com,  correct? 

A.  I  do  not  recall  them  being  Twitter,  so. 

Q.  So  when  you  find  these  instances  of  Twitter  that  we  talked 
about  today,  it's  the  URL,  right? 

A.  Correct. 

Q.  But  there's  not  actually  evidence  that  URL  was  pulled  up  on 
the  computer? 

A.  Correct. 

ADC [CPT  T00MAN] :  I'd  like  to  retrieve  Defense  Exhibit  Igloo 
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Igloo  —  India  India  [retrieving  the  document  from  the  court 
reporter].  I'm  handing  the  witness  India  India  for  identification 
[handing  the  document  to  the  witness] . 

WIT:  Yes,  sir. 

Q.  What  is  that? 

A.  [Looking  at  the  document]  This  is  a  recovered  web  page  from 
the  unallocated  space.  This  web  page  —  with  my  initials  next  to  it. 

Q.  How  do  you  know  that's  what  it  is? 

A.  Because  I  was  there  when  it  was  created. 

Q.  How  did  you  find  or  how  was  this  article  found? 

A.  This  article  was  found  based  off  —  first  identifying  the 
location  of  the  two  Tweets  —  the  two  Tweets  that  I  spoke  of  earlier, 
the  ones  that  were  shorter.  Those  were  embedded  in  this  web  page. 

ADC [CPT  TOOMAN] :  I'd  like  to  retrieve  Prosecution  Exhibits  194 
Charlie  and  Bravo,  please  [retrieving  the  documents  from  the  court 
reporter.]  Publish  these  [placing  the  documents  on  the  projection 
screen  in  full  view  of  all  court-martial  participants] . 

Q.  Special  Agent  Shaver,  I've  published  194  Bravo  and  Charlie. 
Are  these  the  URLs  that  you  used  to  find  that  article? 

A.  Correct. 

ADC [CPT  TOOMAN]:  Removing  194  Bravo  and  Charlie  and  handing  them 
to  the  court  reporter  [removing  the  documents  from  the  projection 
screen  and  handing  them  to  the  court  reporter] .  I'm  going  to 
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retrieve  India  and  India  —  Defense  Exhibit  India  India  for 
identification  [retrieving  the  document  from  the  witness] .  And 
permission  to  publish,  ma'am? 

MJ:  Go  ahead. 

[The  Assistant  Defense  Counsel [CPT  TOOMAN]  placed  the  document 
on  the  projection  screen  in  full  view  of  all  court-martial 
participants . ] 

Q.  Now,  Agent  Shaver,  why  did  this  article  come  up  when  you 
searched  the  unallocated  space  for  those  URLs? 

A.  Because  they're  embedded  links. 

Q.  Where  in  this  article  do  you  recall  were  those  links 
embedded? 

A.  I  don't  remember  which  one  is  —  which  link  went  to  which 
one,  but  approximately  from  the  bottom  to  the  top  --  when  he  starts 
to  run  earlier  — 

Q.  Okay. 

A.  —  the  fourth  paragraph  up  —  there's  a  link  file  on  the 
immediately  left  —  earlier  WikiLeaks  versus  Twitter. 

ADC [CPT  TOOMAN]:  I'm  zooming  in. 

A.  Yeah,  basically  the  fourth  paragraph  up  — 

Q.  Yeah. 

A.  —  where  it  says  WikiLeaks  Twitter  feed.  That  is  one.  And 
another  one  was  in  the  paragraph  starting  with  all  the  Tweets  came 
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out  in  a  rush. 

Q.  Okay.  Now,  Agent  Shaver,  this  article  was  found  in  the 
unallocated  space  of  PFC  Manning's  Mac  computer,  correct? 

A.  Correct. 

Q.  So  that  means  that  at  some  point  this  article  was  pulled  up 
on  his  computer? 

A.  Yes. 

Q.  Now  you  don't  know  if  he  actually  clicked  on  the  link  and 
followed  it,  correct? 

A.  Correct. 

Q.  Because  we  don't  have  any  actual  Twitter.com  web  pages? 

A.  Correct. 

Q.  Now  while  we're  here.  Agent  Shaver,  I'd  like  to  have  you 
read  —  I'm  going  to  put  to  the  —  actually  if  you  could  just  read 
the  third  paragraph? 

A.  Starts  with  word  Assange? 

Q.  Right. 

A.  Yes?  No? 

Q.  Yes. 

A.  Assange  was  traveling  to  speak  at  an  investigative 
journalism  conference  in  Norway  and  told  SBS  that  "U.S.  sources  told 
Icelandic  State  media  that  the  U.S.  State  Department  was  aggressively 
investigating  a  leak  from  the  U.S.  Embassy  in  Reykjavik". 
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ADC [CPT  TOOMAN] :  I'm  removing  Defense  Exhibit  for  identification 
India  India  and  offering  it  as  Defense  Exhibit  India  India  [removing 
the  document  from  the  projection  screen  and  handing  it  to  the 
Military  Judge] . 

MJ:  Any  objection? 

TC [MAJ  FEIN]:  No,  ma’am. 

MJ:  Defense  Exhibit  India  India  is  admitted. 

Q.  I’d  like  to  talk  now  about  the  other  Tweet  —  the  third 
Tweet . 

ADC [CPT  TOOMAN]:  I'm  retrieving  Prosecution  Exhibit  193  [Alpha] 
[retrieving  the  document  from  the  court  reporter,  and  placing  it  on 
the  projection  screen  in  full  view  of  all  court-martial 
participants] . 

Q.  Agent  Shaver,  this  Tweet  includes  a  link,  correct? 

A.  Correct. 

Q.  And  you've  gone  to  that  link,  correct? 

A.  I  have. 

Q.  And  that  link  offers  —  it's  an  article  on  Gawker.com? 

A.  Yes. 

Q.  And  it's  an  explanation  of  the  Tweet  —  it  elaborates  on 

it? 

A.  Yes. 

Q.  And  what  that  article  says  is  that  Facebook  deleted  a  fan  - 


10692 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


9 


-  an  unofficial  WikiLeaks  page,  correct? 

A.  Correct. 

Q.  And  they  did  that  because  it's  their  policy  that  they  don't 
want  to  confuse  users  of  Facebook,  right? 

A.  Yes. 

Q.  And  if  there's  an  unofficial  page  that  can  be  confused  with 
the  official  page,  they'll  take  down  the  unofficial  page.  And  then 
what  they  do  is  they  migrate  the  user  from  the  unofficial  page  over 
to  the  official  page? 

A.  Yes,  sir. 

ADC [CPT  TOOMAN] :  Removing  Prosecution  Exhibit  193  Alpha 
[removing  the  document  from  the  projection  screen] . 

Q.  Let's  talk  about  the  SIGACT,  okay? 

A.  Yes,  sir. 

Q.  Now  the  SIGACT  you  found  reference  to  in  the  value  mounting 
data,  correct? 

A.  Correct. 

Q.  And  how  you  found  it  was  there  was  a  SIGACT  of  interest, 
right? 

A.  Okay. 

Q.  You  were  asked  to  find  something  - 

A.  Yes. 

Q.  --  referencing  or  related  to  a  particular  SIGACT? 
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A.  Correct. 

Q.  And  when  you  —  you  looked  at  the  SIGACT  —  the  actual 
SIGACT? 

A.  Actually  no. 

Q.  You  were  given  -- 

A.  Some  basic  information. 

Q.  —  some  basic  information  from  the  government? 

A.  Yes. 

Q.  One  of  the  pieces  of  information  you  were  given  was  the 
CIDNE  sort  of  the  identifying  number  of  the  SIGACT? 

A.  No.  I  was  basically  told  it  was  a  —  it  was  a  SIGACT 
involving  press  --  printing  and  arrest  of  people. 

Q.  And  so  you  did  some  key  word  searches  and  then  you  found 
part  of  these  SIGACT  — 

A.  Correct. 

Q.  —  in  the  unallocated  clusters,  right? 

A.  Correct. 

Q.  And  then  once  you  had  a  piece  of  that  SIGACT  up,  that 
SIGACT  has  some  sort  of  identifying  number  on  it? 

A.  Yes. 

Q.  And  then  you  took  that  identifying  number,  right,  and  then 
you  searched  PFC  Manning's  computer  for  other  instances  of  that 
identifying  number? 
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A.  I  did. 

Q.  And  one  of  the  things  you  found  was  a  file  on  a  CD  that  had 
been  mounted  on  PFC  Manning's  computer? 

A.  Correct. 

Q.  So  basically  at  some  point  PFC  Manning  put  a  CD  in  his 
computer,  and  on  that  CD  was  a  file  a  . txt  file,  right? 

A.  I  don't  know  the  extension. 

Q.  Okay,  there  was  a  file,  and  the  name  of  that  file  was  the 
same  as  the  ID  number  for  this  SIGACT? 

A.  Correct. 

Q.  You  don't  know  if  that  file  was  actually  the  SIGACT? 

A.  Correct. 

Q.  But  it's  a  pretty  random  number  to  have  been  anything  else? 

A.  I  would  agree  with  you,  yes. 

Q.  Now  you  found  a  bunch  of  SIGACTs  in  the  course  of  your 
investigation  over  all  the  different  pieces  of  medium  associated  with 
PFC  Manning,  correct? 

A.  Yes. 

Q.  PFC  Manning's  charged  with  taking  hundreds  of  thousands  of 
SIGACTs  and  giving  them  to  WikiLeaks  and  you  found  all  of  those? 

A.  Yes. 

Q.  And  you  found  those  on  an  SD  card? 

A.  Correct. 
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Q.  Could  you  tell  the  Court  how  those  were  named  individually? 

A.  I'm  not  sure  how  to  answer  that  question,  sir.  They  were  - 
-  I  found  them  is  —  I  found  them  in  the  unallocated  space  of  the  SD 
card.  So  they  had  no  file  names.  The  —  within  the  yada.tar  —  that 
DZ2,  the  encrypted  file,  they  were  located  within  two  CSV  files.  So 
each  entry  within  those  CSV  files  was  SIGACTs  --  I'm  --  sorry  I  don't 
know  how  to  answer  that  question. 

Q.  You  can't  answer  that  question  because  they  weren't 
individually  saved,  right? 

A.  Correct.  It  was  --  in  mass. 

Q.  They  were  in  the  CSV  file,  right,  and  the  CSV  file  is 
associated  with  Excel?  That's  probably  the  easiest  way  any  of  us 
know  how  to  a  CSV  file,  right? 

A.  Correct. 

Q.  Those  SIGACTs  you  found  weren't  individually  downloaded, 
correct? 

A.  Don't  know. 

Q.  When  you  found  them  they  were  all  grouped  together, 
correct? 


A.  Yes. 

Q.  And  they  were  grouped  together  in  these  CSV  files,  right? 
A.  Yes. 

Q.  And  those  CSV  files  were  in  yada? 
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A.  Yada. tar.dz2.nc. 

Q.  So  this  SIGACT  that  we're  talking  about  now  wasn't 
downloaded  with  all  of  those  or  it  wasn't  kept  with  all  those? 

A.  Correct. 

Q.  Those  were  all  kept  on  an  SD  card? 

A.  Yes. 

Q.  This  one  was  kept  on  his  personal  Macintosh? 

A.  Correct.  Sir?  But  the  dates  were  wrong. 

Q.  Okay. 

A.  The  dates  on  the  SD  cards  is  2009  —  prior.  That  one 
happened  in  2010. 

Q.  Well,  so  this  — 

A.  So  this  —  it  wouldn't  been  part  of  it. 

Q.  —  so  this  was  one  that  was  completely  separate  from  those 

ones  on  the  SD  card? 

A.  Correct. 

Q.  Those  were  2009.  This  one's  dated  2010? 

A.  Yes. 

Q.  And  when  you  looked  at  the  volume  mounting  data,  and  you 
saw  that  CIDNE  ID  number,  you  didn't  see  other  volume  mounting  data 
with  CIDNE  ID  numbers,  did  you? 

A.  Did  not. 

Q.  So  there  were  no  other  files  that  had  been  put  on  a  CD  that 
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had  the  same,  I  guess,  naming  convention  as  the  CIDNE  ID  number? 

A.  I  did  not  see  any. 

Q.  So  it  would  seem  that  this  particular  SIGACT  was  in  some 
way  unique? 

A.  Yes. 

Q.  It  was  downloaded  and  saved  individually? 

A.  Yes. 

Q.  Separate  and  apart  from  all  of  the  others? 

A.  It  appears  as  though,  yes. 

Q.  I  want  to  talk  to  you  about  some  of  those  web  pages  you 
mentioned  that  you  found  when  you  searched  the  unallocated  space  of 
PFC  Manning's  Mac. 

A.  Okay. 

Q.  You  found  a  number  of  basically  fragments  of  web  pages, 
correct? 

A.  Correct. 

Q.  And  what  you  all  did  when  you  did  your  forensic  report,  you 
and  Mr.  Johnson,  you  created  attachments,  right? 

A.  Yes. 

Q.  And  one  group  of  attachments.  Attachment  S,  was  a  number  of 
articles  that  implicated  WikiLeaks  in  some  way? 

A.  The  key  word  WikiLeaks  was  present  in  them. 

Q.  Sure.  So  anything  you  found  that  sort  of  invoked 
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WikiLeaks,  any  web  page  fragment  would  have  gone  into  Attachment  S, 
correct? 

A.  Correct. 

ADC [CPT  TOOMAN] :  Okay.  I'd  like  to  retrieve  Defense  Exhibit 
Kilo  Kilo  for  identification  [retrieving  the  document  from  the  court 
reporter].  I'm  going  to  hand  this  to  the  witness [handing  the 
document  to  the  witness] . 

Q.  Now,  Agent  Shaver,  what  is  that? 

A.  [Looking  at  the  document]  It's  a  two-page  —  it  looks  like 
a  recovered  web  page. 

Q.  This  that  a  —  is  this  an  example  of  a  web  page  fragment 
that  you  would  have  found? 

A.  Yes. 

Q.  Is  this  one  that  you  all  did  find? 

A.  It  is  marked  as  such.  I  don't  recall  this  one 

specifically,  but  it  is  marked  in  accordance  the  way  we  mark  these 
files . 

Q.  What  markings  in  particular  suggest  to  you  that  this  was 
one  that  you  all  found? 

A.  It  has  our  case  numbers  on  it.  It  has  the  FOIA  LES 
classification  marking.  Attachment  S.  The  font's  the  same. 

Q.  Okay.  Now,  Agent  shaver,  I'd  like  you  to  read  —  on  Page 
One  of  that  exhibit  for  identification  there's  basically  a  paragraph 
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of  text.  Could  you  read  that,  please?  It  starts  "by  releasing  such 
a  graphic  video." 

A.  Got  it.  [Reading  from  the  document]  By  releasing  such  a 
graphic  video,  which  a  media  organization  has  tried  in  vein  to  get 
through  traditional  channels,  WikiLeaks  has  inserted  itself  in  the 
national  discussion  about  the  role  of  journalism  in  the  digital  age. 
Where  judges  - 

Q.  You  can  stop  there. 

A.  Okay. 

ADC [CPT  TOOMAN] :  I'm  going  to  retrieve  Defense  Exhibit  Kilo  Kilo 
for  identification  [retrieving  the  document  from  the  witness]  and 
offer  it  as  Defense  Exhibit  Kilo  Kilo  [handing  the  document  to  the 
Military  Judge] . 

MJ:  Any  objection? 

TC [MAJ  FEIN]:  It's  actually  already  been  admitted.  No,  ma'am. 

MJ:  It  has? 

TC [MAJ  FEIN]:  Well,  it's  —  it's  part  of  a  larger  exhibit 
that's  already  been  admitted. 

MJ:  All  right.  I  assume  you  want  it  separate  from  that  larger 

exhibit? 

ADC [CPT  TOOMAN]:  Yes,  ma'am,  to  try  and  zero  you  in  on  it. 

M J :  Defense  Exhibit  Kilo  Kilo's  admitted. 

Q.  Now,  Agent  Shaver,  that  again  was  something  that  was  found 
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on  the  unallocated  space  of  PFC  Manning's  Mac? 

A.  Correct. 

Q.  Which  means  at  some  point  it  was  up  on  the  screen? 

A.  Yes. 

Q.  Again,  you  can't  say  for  sure  whether  or  not  he  saw  it, 
right? 

A.  Correct. 

Q.  But  it  was  up  on  the  screen? 

A.  Yes. 

ADC [CPT  TOOMAN] :  I'd  like  to  retrieve  Defense  Exhibit  Lima  Lima 
for  identification  [retrieving  the  document  from  the  court  reporter] . 
Permission  to  publish,  ma'am? 

MJ:  Go  ahead. 

ADC [CPT  TOOMAN]:  Oh,  I'm  not  supposed  to  do  that.  I'm  going  to 
hand  it  to  the  witness  [handing  the  document  to  the  witness] . 

Q.  Agent  Shaver,  what  is  this? 

A.  [Looking  at  the  document]  Again,  it  appears  to  be  Attach  — 
another  file  from  Attachment  S  from  the  forensic  report. 

Q.  And  how  do  you  know  that? 

A.  The  markings  are  on  it. 

Q.  Now,  Agent  Shaver,  I'd  like  to  direct  your  attention  to  the 
first  page  —  actually  Page  Two.  And  there's  —  the  first  full 
paragraph  that  starts  with  the  Sunshine  Press.  Would  you  read  that 
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please? 

A.  The  full  paragraph? 

Q.  Please. 

A.  [Reading  from  the  document]  The  Sunshine  Press  (WikiLeaks) 
is  a  nonprofit  organization  funded  by  human  rights  campaigners, 
investigative  journalists,  technologists,  and  the  general  public. 
Through  your  support  we  have  exposed  significant  injustice  around  the 
world  successfully  fighting  off  over  100  legal  attacks  in  the 
process.  Although  our  work  produces  reforms  daily  and  it  is  the 
recipient  of  numerous  prestigious  awards  including  the  2008  Index  of 
Censorship  Economist  of  Freedom  of  Expression  Award  as  well  as  the 
2009  NSD  International  New  Media  Award,  these  accolades  do  not  pay 
the  bills. 

Q.  You  can  stop  there.  Agent  Shaver.  Thank  you. 

ADC [CPT  TOOMAN] :  Retrieve  this  for  the  witness  and  offer  Defense 
Exhibit  Lima  Lima  as  Defense  Exhibit  Lima  Lima  [retrieving  the 
document  from  the  witness] . 

TC [MAJ  FEIN]:  No  objection. 

MJ:  It's  already  admitted.  How  many  of  these  articles  are  we 

going  to  go  through?  I'm  just  thinking  of  a  faster  process  to 
showing  them  all  and  then  have  him  read  what  you  want  to  read  out  of 
them? 

ADC [CPT  TOOMAN]:  Yes,  ma'am,  there  are  four  more. 
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MJ:  And  they're  all  admitted,  right? 

ADC [CPT  TOOMAN] :  Yes,  ma'am. 

MJ:  I  mean,  does  the  government  want  the  defense  to  go  through 

a  foundation  for  each  of  these  exhibits  since  it's  — 

TC [MAJ  FEIN]:  Absolutely  not.  Your  Honor. 

MJ:  —  since  it's  already  been  admitted? 

Then  I'm  going  to  admit  them  all,  and  then  you  can  have  the  witness 
read  whatever  —  their  all  from  S  —  Attachment  S,  right? 

ADC [CPT  TOOMAN]:  Yes,  ma'am. 

MJ:  Okay.  All  right,  so  I  have  for  admission  then 

Appellate [sic]  Exhibit  Lima  Lima,  Appellate  Exhibit  --  or  I'm  sorry, 
Defense  Exhibit  --  Defense  Exhibit  Mike  Mike,  Defense  Exhibit 
November,  Defense  Exhibit  Oscar  Oscar,  and  Defense  Exhibit  Papa  Papa, 
and  they're  all  admitted.  Captain  Tooman,  here  you  go  [handing  the 
documents  to  the  Assistant  Defense  Counsel [CPT  TOOMAN]. 

ADC [CPT  TOOMAN]:  Thank  you,  ma'am.  I'm  going  to  give  Lima  Lima 
back  to  the  court  reporter  [handing  the  exhibit  to  the  court 
reporter] .  I'm  going  to  hand  Mike  Mike,  November  November,  Oscar 
Oscar,  and  Papa  Papa  to  the  witness  [handing  the  document  to  the 
witness] . 

Q.  Agent  Shaver,  let's  look  at  Defense  Exhibit  Mike  Mike.  And 
I'd  like  you  to  look  at  Page  Two. 

A.  [Looking  at  the  document]  Okay. 
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Q.  And  the  third  —  well,  I  guess  the  fourth  paragraph  down 
starting  the  most  recent  opening? 

A.  Yes. 

Q.  Could  you  read  that  and  then  the  following  paragraph, 
please? 

A.  [Reading  from  the  document]  The  most  recent  openings  in  the 
haze  of  immediate  and  political  hypocrisy  began  with  a  near 
simultaneous  revelations  of  civilian  deaths  at  the  hands  of  U.S. 
forces  in  the  Iraq  and  Afghanistan.  The  now  ubiquitous  WikiLeaks 
video  footage  of  Soldiers  firing  on  orders  of  photographer  Namir 
Noor-Eldeen,  his  colleague,  Saeed  Chmagh,  and  other  civilians  in 
Baghdad  in  July  2007  was  equal  and  graphic  power  by  the  acquisitions 
that  in  February  of  2010  U.S.  Special  Forces  personnel  had  not  only 
killed  two  pregnant  women  along  with  a  teenage  girl  and  two  local 
officials  in  Kandahar,  Afghanistan,  but  carved  the  bullets  out  of 
bodies  to  remove  evidence  of  their  responsibilities  for  their  deaths. 

Q.  Stop  there.  Thank  you.  Agent  Shaver.  And  move  on  to 
Defense  Exhibit  November  November? 

A.  Okay. 

Q.  And  if  you  could,  please,  read  the  paragraph  starting  the 
website  has  become  increasing  hard  to  ignore. 

A.  [Reading  from  the  document]  The  website  has  become 
increasingly  hard  to  ignore  over  the  years.  The  impact  of  some  of 
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its  scopes  according  to  some  media  watchers  far  exceeds  that  of  even 
established  news  organizations. 

Q.  Thank  you.  To  Oscar  Oscar,  please  —  Defense  Exhibit  Oscar 
Oscar. 

A.  [Looking  at  the  document]  Okay. 

Q.  And  if  you  could  read  there  at  the  top  of  Page  One;  in  an 
open  platform? 

A.  [Reading  from  the  document]  An  open  platform  for  the 
anonymous  publishing  of  compromising  documents  according  to  Time 
Magazine.  WikiLeaks  could  become  as  important  a  journalistic  tool  as 
the  Freedom  of  Information  Act. 

Q.  You  can  stop  there.  Thank  you.  And  finally  Defense 
Exhibit  Papa  Papa.  If  you  could  look  at  Page  Four.  Down  towards  the 
bottom  you  see  a  heading  Collateral  Murder  in  Iraq? 

A.  [Looking  at  the  document]  Yes. 

Q.  The  United  States  military  video  —  if  you  could  read  the 
first  two  sentences  there,  please? 

A.  [Reading  from  the  document]  The  United  States  military 
video  was  released  week  showing  the  indiscriminate  targeting  and 
killing  of  civilians  in  Baghdad.  The  nonprofit  news  organization 
WikiLeaks  obtained  the  video  and  made  it  available  on  the  Internet? 

ADC [CPT  TOOMAN] :  Thank  you.  Agent  Shaver.  I'll  retrieve  those 
exhibits  from  the  witness  [retrieving  the  documents  from  the  witness 
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and  returning  them  to  the  court  reporter] . 

TC [MAJ  FEIN]:  No  further  questions.  Thanks,  Agent  Shaver. 

MJ:  Redirect. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

TC [MAJ  FEIN]:  You're  almost  finished  and  possible  for  the  whole 
court-martial.  You  need  some  more  water.  Special  Agent  Shaver? 

[Water  was  provided  to  the  witness.] 

MJ:  Okay,  Major  Fein,  is  this  going  to  be  a  long  or  short 

redirect?  I'm  looking  at  whether  we  need  a  recess? 

TC [MAJ  FEIN]:  Actually  a  recess  —  short,  ma'am,  but  I  was 
going  to  look  at  these  real  quick.  So  maybe  a  recess  would  be  a  good 
idea  at  this  time. 

MJ:  All  right.  Why  don't  we  do  that.  Let's  take  a  quick  ten- 

minute  recess.  During  the  recess  if  you  could  you,  counsel,  I'd  like 
for  you  to  come  see  me  just  so  we  can  talk  about  the  way  ahead. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  The  Court  is  in  recess  until  1900  or  7  o'clock. 

[The  court-martial  recessed  at  1848,  18  July  2013.] 

[The  court-martial  was  called  to  order  at  1859,  18  July  2013.] 

MJ:  The  Court  is  called  to  order.  Let  the  record  reflect  all 
parties  present  when  the  Court  last  recessed  are  again  present  in 
court.  The  witness  on  the  witness  stand.  Major  Fein? 
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REDIRECT  EXAMINATION 
Questions  by  the  Trial  Counsel : 

Q.  Special  Agent  Shaver,  in  reference  to  your  testimony  just 
now  on  cross-examination  on  Wget,  a  few  questions.  You  testified 
about  if  you  knew  the  web  address  —  the  URL  for  a  specific  cable  you 
could  type  that  into  a  web  browser? 

A.  Correct. 

Q.  What  do  you  —  what  did  you  mean  by  that? 

A.  If  you  go  to  the  address  bar,  open  a  web  browser,  go  to  the 
address  bar  and  type  that  in,  be  as  the  actual  path  to  the  file.  So 
it  should  —  would  appear  in  your  web  browser. 

Q.  And  what  program  was  installed  on  the  .22  and  .40  computers 
that  allowed  its  users  to  view  web  pages? 

A.  Internet  Explorer  and  Firefox. 

Q.  And  what  program  installed  on  .22  and  .40  allowed 
individuals  to  navigate  to  web  pages  to  view  web  pages? 

A.  Internet  Explorer  and  Firefox. 

Q.  What  about  to  download  pages  —  web  pages  —  how  —  what 
program  was  installed  on  .22  and  .40  to  allow  users  to  download  web 
pages  if  they  so  chose? 

A.  Internet  Explorer  and  Firefox. 

Q.  Does  having  —  you  testified  about  that  it  was  possible  to 
having  —  of  having  the  NCD  web  page  —  the  web  page  for  the  database 
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open  in  one  window  and  running  Wget  in  the  other.  Do  you  remember 
that? 

A.  Correct. 

Q.  How  does  one  relate  to  the  other,  if  at  all? 

A.  Well,  besides  the  obvious  that  they're  both  running  on  the 
same  computer  and  they're  both  connecting  to  the  State  Department, 
but  otherwise,  no. 

Q.  Does  having  the  NCD  database  web  page  up  in  a  browser 
affect  running  Wget  get  at  all? 

A.  No. 

Q.  Are  they  operating  independently  of  each  other? 

A.  Yes,  they're  independent. 

Q.  And  is  the  program  Wget  the  same  as  a  web  browser? 

A.  No. 

Q.  And  --  actually  now  I  just  direct  your  attention  or  focus 
your  testimony  on  the  SIGACT  and  some  of  the  information  you 
testified  about  in  cross-examination.  You  testified  that  you  didn't 
find  any  other  information  about  that  SIGACT  on  his  personal  Mac, 
correct? 

A.  Correct. 

Q.  Did  you  find  any  other  information  referencing  that  SIGACT 
on  any  other  evidence  you  examined? 

A.  I  did. 


10708 


o 


9 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


Q.  And  where  did  you  find  another  copy  of  that  SIGACT  in  its 


entirety? 

A.  Within  the  bradley .manning  profile  on  the  T-drive. 

Q.  And  did  you  compare  the  two? 

A.  I  did. 

Q.  And  what  —  how  did  they  compare? 

A.  The  one  on  T-drive  is  the  complete. 

Q.  And  was  there  one  on  the  - 

MJ:  Is  what? 

WIT:  Is  complete. 

Q.  And  why  is  the  other  one  not  complete? 

A.  It  was  unallocated  —  it  was  partially  deleted. 

Q.  And  for  the  one  that  was  complete,  was  it  an  individual 

file  or  part  of  a  larger  Excel  spreadsheet? 

A.  It  was  an  individual  file. 

TC [MAJ  FEIN]:  Thank  you.  No  further  questions.  Your  Honor. 
MJ:  Go  ahead  [speaking  to  the  defense] . 

RECROSS-EXAMINATION 


Questions  by  the  Assistant  Defense  Counsel [CPT  TOOMAN] : 

Q.  Special  Agent  Shaver,  when  a  user  employs  Wget  to  download 
a  cable  then  it  is  on  their  computer  in  whatever  place  they've  setup 
for  it  to  be  saved,  right? 

[No  response  from  the  witness.] 
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Q.  And  then  the  user  can  then  view  it,  correct?  So  - 

A.  I'm  sorry. 

Q.  So  let's  —  let's  use  our  09  —  let's  use  our  09Viennal 
cable . 

A.  Okay. 

Q.  Hypothetical  cable.  You  download  that  with  Wget .  That's 
now  on  your  computer,  correct? 

A.  Correct. 

Q.  You  can  view  that  cable,  correct? 

A.  Yes. 

Q.  And  if  you  double  click  on  that  cable  how  does  it  open  up? 

A.  It  would  open  with  your  default  browser. 

Q.  So  Internet  Explorer  or  Firefox? 

A.  Correct. 

ADC [CPT  TOOMAN] :  Thanks,  Agent  Shaver. 

[Pause] 

MJ:  I  don't  think  I  have  any  questions.  So  temporary  or 

permanent  excusal? 

TC [MAJ  FEIN]:  Unfortunately  for  him,  ma'am,  temporary. 

[The  witness  was  temporarily  excused,  reminded  of  his  previous  oath, 
and  withdrew  from  the  courtroom.] 

MJ:  I  met  with  counsel  for  an  R.C.M.  802  conference  about  ten 

minutes  ago  to  discuss  the  way  forward.  Understanding  the  hour,  PFC 
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1  Manning  needs  to  eat.  We  have  additional  rebuttal  and  surrebuttal 

2  testimony  to  go  forward  with.  So  we're  going  to  resume  tomorrow 

3  morning  at  0930.  Is  there  anything  else  we  need  to  address? 

4  CDC [MR.  COOMBS]:  No,  Your  Honor. 

5  TC [MAJ  FEIN]:  No,  ma'am. 

6  MJ:  All  right.  Court  is  in  recess  until  0930  tomorrow  morning. 

7  [The  court-martial  recessed  at  1905,  18  July  2013.] 

8  [END  OF  PAGE] 
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1  [The  court-martial  was  called  to  order  at  0931,  19  July  2013.] 

2  MJ:  Court  is  called  to  order.  Major  Fein,  please  account  for 

3  the  parties. 

4  TC [MAJ  FEIN]:  Yes,  ma'am.  Your  Honor,  all  parties  when  the 

5  Court  last  recessed  are  again  present.  As  of  0920  this  morning  there 

6  were  16  members  of  the  media  at  the  media  operations  center,  one 

7  stenographer.  There's  no  media  in  the  courtroom,  and  17  spectators 

8  in  the  courtroom.  The  overflow  trailer  is  not  currently  being  used 

9  but  is  available. 

10  MJ:  All  right.  Have  there  been  any  additional  exhibits  added 

11  to  the  record? 

12  TC [MAJ  FEIN]:  Yes,  ma'am.  What's  been  marked  Appellate  Exhibit 

13  611  is  the  defense's  Request  for  Special  Finding  Article  51  Delta  of 

14  the  Uniform  Code  of  Military  Justice  and  R.C.M.  918  Bravo. 

15  MJ:  Okay.  And,  Defense,  as  I  read  that  request,  that's 

16  basically  for  special  findings  for  everything. 

17  CDC [MR .  COOMBS]:  That  is  correct.  Your  Honor. 

18  MJ:  Okay.  All  right,  before  we  continue.  Government,  I  notice 

19  Captain  von  Elten  is  not  here.  Going  back  to  the  641  arguments  we 

20  had  yesterday,  I  did  have  a  question  on  the  government's  position 

21  with  respect  to  the  defense  assertion  that  the  —  not  the  entire 

22  database  was  stolen  or  knowingly  converted;  only  part  of  it  was.  And 

23  what's  the  government's  position  with  respect  to  the  charge  — 
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charges? 

TC [MAJ  FEIN]:  Ma'am,  is  —  is  the  Court  asking  for  all  of  the 
641  offenses  or  any  specific  databases? 

MJ:  Well,  I  believe  defense  --  I  know  at  least  with  the  CIDNE- 

I,  CIDNE-A  —  everything  except  SOUTHCOM,  I  believe  is  what  you  said. 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  As  far  as  —  the  SOUTHCOM 
database  was  the  only  one  that  didn't  change  at  any  point  in  time. 

The  CIDNE-I  and  CIDNE-A  database  had  other  tables  in  it.  One  of 
those  tables  was  the  SIGACTs  table.  The  - 

MJ:  All  right.  What  about  NCD? 

CDC [MR.  COOMBS]:  NCD;  it  changed  over  time  as  far  as  the  — 
everyday  additional  things  coming  it,  but  it  only  had  cables. 

MJ:  Okay,  so  really  we're  talking  about  CIDNE-A  and  CIDNE-I. 

CDC [MR.  COOMBS]:  Correct,  Your  Honor. 

MJ:  Okay,  so  that's  what  I'm  looking  at.  As  you've  charged  the 

databases  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  with  such-and-such  records.  And  the  evidence  hasn't  - 

-  the  evidence,  as  the  defense  suggested,  came  out  that's  only  part 
of  the  CIDNE-A  and  CIDNE-I  databases. 

TC [MAJ  FEIN]:  Well,  first,  ma'am,  the  evidence  actually  doesn't 
have  that  it's  a  separate  table  within  it.  It  said  that  the  - 

MJ:  Excuse  me? 
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1  TC [MAJ  FEIN]:  Ma'am,  the  actual  evidence  that's  presented 

2  before  the  Court  isn't  that  there's  a  database  with  multiple  tables, 

3  and  those  multiple  tables  —  there's  some  tables  that  include 

4  counter-IED  or  HUMINT  reports.  The  testimony  has  been  that  when  you 

5  access  CIDNE,  the  web  page,  and  you  go  on  there,  there's  different 

6  types  of  reports  to  pull  --  just  a  clarify  of  what  the  evidence  that 

7  has  presented  by  both  parties.  As  far  as  the  Court's  question  on 

8  government's  position  for  CIDNE-A  and  CIDNE-I,  whether  —  if  it  was  a 

9  lesser  amount  --  I  guess  I  - 

10  M J :  What  I'm  looking  at  is  the  government's  position.  Defense, 

11  as  I  understand  it,  and  correct  me  if  I'm  wrong,  has  asserted,  okay, 

12  CIDNE-I  is  a  database.  The  SIGACTs  are  a  subset  of  that  database, 

13  and  there's  things  besides  the  SIGACTs  there. 

14  CDC [MR.  COOMBS]:  That's  correct.  Your  Honor.  And  that  is  the 

15  testimony  that  has  been  elicited  by  multiple  witnesses  during  the 

16  government's  case  in  chief. 

17  MJ:  And  does  the  government  dispute  that? 

18  TC [MAJ  FEIN]:  The  government  disputes.  Your  Honor,  that  —  that 

19  the  government's  evidence  that's  been  presented  has  been  that  the 

20  portion  of  the  CIDNE  database  —  the  portion  of  CIDNE  that  was  pulled 

21  —  the  CIDNE  database  was  the  SIGACTs.  There's  other  types  of 

22  reports  that  existed  on  CIDNE;  whether  they're  part  of  the  same 

23  database  or  not,  there  hasn't  been  evidence  to  say  that.  It's  a  very 
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technical  difference  there,  but  there  hasn't  been  --  there  has  been 
evidence,  and  the  government  absolutely  concedes  this,  that  there's 
other  information  that  —  that  existed  through  CIDNE .  That's  what 
the  counter-IED,  the  HUMINT  reporting  has  been.  Now  whether  it  is 
part  of  the  same  database  or  not,  there  has  no  —  there's  been  not 
been  any  testimony  to  that.  But  there  has  been  testimony  that  the 
database  containing  the  SIGACTs  is  what  was  compromised  on  a  certain 
date  and  time,  and  that's  in  Mr.  Hoeffel's  Stipulation  of  Fact  [sic]. 
The  exact  date  and  time  —  the  snapshot  in  time,  which  is  what  I 
thought  the  court's  original  question  was  is  that  the  snapshot  in 
time  he  took  all  the  SIGACTs. 

MJ:  Okay,  let  —  okay.  CIDNE-I  - 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  -  is  that's  a  database? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  What  is  contained  in  CIDNE-I?  Is  it  just  SIGACTs  or  is  it 

SIGACTs  and  something  else? 

TC [MAJ  FEIN]:  May  I  have  a  moment.  Your  Honor? 

MJ:  Yes. 

CDC [MR.  COOMBS]:  Ma'am,  as  an  Officer  of  the  Court,  I  will 

represent  that  it  —  it's  multiple  tables  other  than  SIGACTs.  I 
would  expect  the  government  counsel  to  represent  the  same. 

MJ:  Is  that  - 
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1  CDC [MR.  COOMBS]:  It's  easily  - 

2  MJ:  -  is  that  based  on  the  evidence  that's  been  presented? 

3  CDC [MR.  COOMBS]:  Yes,  Your  Honor.  It's  easily  identifiable 

4  and  it  is  based  upon  the  evidence.  Witnesses  —  I  asked  several 

5  witnesses  during  the  government's  case  in  chief  what  else  was 

6  contained  in  CIDNE-I?  You  had  HUMINT  reports.  You  had  Intel 

7  reports.  You  had  PSYOP  reports.  You  had  terrain  reports.  You  had 

8  social  economic  reports.  All  these  reports  —  I  brought  that  out 

9  during  the  government's  case  in  chief  to  show  that  he  had  a  full 

10  range  of  all  this  stuff,  and  HUMINT  reports  were  much  more  sensitive 

11  and  if  he  wanted  to  harm  the  United  States,  he  could  have  pulled 

12  those  and  he  didn't.  And  that  was  stuff  that  was  pulled  through  the 

13  testimony  of  the  witnesses.  And,  again,  I  would  think  as  an  Officer 

14  of  the  Court,  Major  Fein  would  immediately  concede  that,  yes,  to  your 

15  question  —  just  so  the  court  knows,  yes,  there  are  multiple  tables. 

16  SIGACTs  is  just  one  of  the  many  tables  in  the  CIDNE-I  and  CIDNE  A 

17  database. 

18  TC [MAJ  FEIN]:  Ma'am,  the  —  I,  the  United  States  is  not 

19  contesting  whether  witnesses  testified  there's  other  information. 

20  Mr.  Coombs  is  purposefully  using  the  term  tables.  No  one  has  done 

21  that.  And  that's  why  I'm  —  just  explained  to  the  court  there  has 

22  been  testimony  there's  other  information  there.  As  I'm  looking  right 

23  now  —  I'm  looking  up  at  what  the  exact  testimony  was.  Your  Honor. 
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There  is  other  information  within  CIDNE .  How  it's  formatted,  how 
it's  technically  in  there,  the  government  does  not  know  that.  But 
when  a  user  does  go  to  CIDNE,  there's  other  options  they  can  chose 
from  the  web  page,  and  that  is  the  testimony  we've  heard.  The  option 
could  be  to  pull  SIGACTs.  The  options  could  be  to  pull  a  counter-IED 
and  HUMINT  reporting.  Whether  it's  a  table  in  the  same  database  or 
not,  there  is  no  evidence  of  that.  It  is  when  a  user  goes  to  CIDNE 
they  make  a  selection.  So  it's  a  - 

MJ:  Is  there  more  than  CIDNE  in  the  database  or  not? 

TC [MAJ  FEIN]:  Ma'am,  there  is  more  than  —  there  is  more  than 
SIGACTs  within  the  CIDNE  database,  yes.  Now,  whether  it  is  tables  or 
not,  the  government  doesn't  know.  And  there  has  been  no  evidence  to 
that.  I  know  it's  a  very  fine  technical  argument,  but  I'm  trying  to 
relate  exactly  what  has  been  presented. 

MJ:  Okay.  Well,  what  I  want  to  know  is  the  government's 

position  —  these  charges  under  641  all  allege  stole  a  database 
consisting  of  such-and-such  records. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Now  if  there  is  —  are  more  things  in  the  database  than 

those  —  than  the  SIGACTs,  what's  the  government's  position  with 
respect  to  those  specifications? 

TC [MAJ  FEIN]:  Yes,  ma'am,  that  those  would  be  lesser  included. 
It  is  less  than  the  total  of  what  is  available,  which  is  why  the 
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specification  is  reading  the  database  containing  a  certain  number  of 
records.  And  that's  not  a  precise  number  either. 

MJ:  So  it's  part  of  the  database. 

TC [MAJ  FEIN]:  It  is  part  of  the  database.  Your  Honor,  and 
that's  evident  --  the  evidence  - 

MJ:  So  is  the  government  —  I  mean,  should  the  Court  in  917 

findings  make  changes  to  the  specifications  to  say  part  of  the 
database? 

TC [MAJ  FEIN]:  Well,  ma'am,  the  United  States  would  argue  that 
it  is  within  the  trier-of-f acts '  purview  to  come  back  with  a  —  with 
a  finding  in  exception  or  substitutions. 

MJ:  I've  got  917  motions  before  me. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Have  you  presented  evidence  that  the  entire  database  has 

been  stolen? 

TC [MAJ  FEIN]:  For  the  CIDNE  database.  Your  Honor,  the  United 
States  has  not  —  if  that  is  what  —  if  that  information  is 
considered  within  the  database  —  although  there  is  —  again,  there's 
no  evidence  that  said  that  it's  in  the  database  —  the  CIDNE 
database . 

MJ:  There's  no  evidence  of  what?  That's  where  I'm  getting 

confused. 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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1  MJ:  I'll  go  through  the  record,  and  I  believe  that  what  the 

2  defense  is  saying  from  my  recollection  is  correct,  that  the  witnesses 

3  said  there's  more  than  the  SIGACTs  in  the  database. 

4  TC [MAJ  FEIN]:  Well,  ma'am  - 

5  MJ:  Or  are  you  saying  that  there  are  fields  in  the  database  you 

6  can  pull  out  of  the  fields  —  the  SIGACTS  —  and  the  same  fields  are 

7  in  the  database  and  you  can  pull  them  in  some  other  form? 

8  TC [MAJ  FEIN]:  Ma'am,  honestly  what  I'm  trying  to  do  is  not 

9  answer  any  questions  with  evidence  that  hasn't  been  presented.  That 

10  would  be  my  answer;  that  a  user  could  go  to  CIDNE  —  I've  done  it 

11  myself,  and  gone  onto  CIDNE  and  made  selections  from  there.  There's 

12  no  evidence  before  the  Court  whether  the  CIDNE  database  itself 

13  organically  has  that  information  stored  within  it  or  not  —  the  other 

14  information.  All  the  users  have  testified  that  they  could  pull 

15  certain  types  of  information  including  SIGACTS  and  other  information. 

16  That's  what's  been  before  the  Court,  which  is  why  - 

17  MJ:  But  if  there's  other  information  in  the  database  that 

18  wasn't  stolen  or  purloined  or  knowingly  converted  - 

19  TC [MAJ  FEIN]:  Yes,  ma'am. 

20  MJ:  -  and  I've  got  a  917  motion,  how  do  I  --  I  mean,  what's 

21  government's  position?  The  entire  database  then  hasn't  been  stolen? 

22  TC [MAJ  FEIN]:  Ma'am,  then  —  then  —  then  if  that  is  —  which 

23  it  appears  to  be  the  defense's  argument,  and  if  that's  their  argument 
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for  917  purposes,  it  would  be  then  the  government  has  presented 
evidence  to  a  lesser  excluded,  which  is  something  less  than  the 
entire  database. 

MJ:  So  is  the  government  then  conceding  that  there's  something 

more  than  SIGACTS  in  the  CIDNE-I  and  CIDNE-A  databases,  based  on  the 
evidence?  And  if  you  want  to  —  I  threw  that  question  at  you,  I 
understand  that.  If  you  want  to  wait  until  the  next  recess  to  answer 
it,  that's  fine. 

TC[MAJ  FEIN]:  And  then  we'll  review  the  evidence  and  get  back 
to  the  court  on  whether  the  actual  CIDNE  database  itself  had  more  or 
not,  based  off  the  evidence  presented  by  both  sides. 

M J:  Okay,  that's  fine. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Again,  I  threw  this  at  you.  It's  a  surprise.  I  understand 

that.  But  I  would  like  an  answer  to  the  question. 

TC [MAJ  FEIN]:  And  it's  only  for  CIDNE,  correct,  ma'am? 

MJ:  I  believe  that's  all  you've  alleged,  right? 

CDC [MR.  COOMBS]:  Right;  the  CIDNE-I  and  CIDNE-A  database,  which 
—  yes,  multiple  witnesses  said  other  information  was  in  the  CIDNE-I 
and  CIDNE-A  databases. 

MJ:  Okay.  It  would  be  helpful  to  me  to  identify  which 

witnesses  said  that. 

TC [MAJ  FEIN]:  Yes,  ma'am. 
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1  CDC [MR .  COOMBS] :  Yeah,  any  unit  witness  I  covered  it  with, 

2  ma'am,  but  I  can  go  through  the  record. 

3  MJ:  Okay.  Is  there  anything  else  we  need  to  address  before  we 

4  proceed? 

5  CDC [MR .  COOMBS]:  Yes,  ma'am.  In  the  802  session  the  defense 

6  renewed  its  objection  to  the  next  witness'  testimony,  and  I'd  like  to 

7  put  it  on  the  record. 

8  MJ:  Go  ahead. 

9  CDC [MR.  COOMBS]:  Under  R.C.M.  905(f),  the  defense  requests 

10  that  you  reconsider  your  determination  that  Ms.  Showman's  statements 

11  are  proper  rebuttal. 

12  First,  the  government  has  offered  Ms.  Showman  as  rebuttal 

13  to  Ms.  McNamara's  testimony.  Now  Ms.  McNamara  testified  about  the 

14  fact  that  PFC  Manning  exhibited  concern  and  care  for  human  life.  He 

15  was  a  humanist.  So  that  was  the  testimony  that  we  received.  Ms. 

16  Showman  is  going  to  testify  to  statements  that  she  alleges  my  client 

17  made  only  to  her;  no  one  else.  Those  statements  do  not  rebut  whether 

18  or  not  PFC  Manning  is  a  humanist.  They  do  not  rebut  whether  or  not 

19  PFC  Manning  has  care  for  human  life.  So  for  that  instance  we  don't 

20  believe  it's  proper  rebuttal. 

21  Secondly,  the  government  chose  not  to  elicit  this  testimony 

22  in  its  case  in  chief.  And  they  certainly  could  have  done  that  when 

23  Ms.  Showman  was  called.  So  under  the  United  States  v.  Murphy,  33  MJ, 
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1  323,  we'd  request  that  the  Court  determine  this  is  evidence  that 

2  should  have  been  offered  in  the  government's  case  in  chief,  and 

3  because  they  didn't  do  that  this  Court  should  exclude  it. 

4  Additionally,  just  looking  at  the  statements;  we  had  made  a 

5  previous  filing  under  404(b)  indicating  that  these  statements  were 

6  not  proper  404 (b)  in  that  they  were  not  —  the  reliability  of  the 

7  statement  —  the  fact  that  the  statement  was  actually  made  could  not 

8  be  determined  based  upon  the  source  of  who  this  was  coming  from;  Ms. 

9  Showman,  and  the  fact  that  the  statements,  at  least  any  documentary 

10  form  of  the  statements,  did  not  get  reduced  to  writing  until  after  my 

11  client's  arrest.  And  the  defense's  position  is  that  is  evidence  of 

12  the  fact  that  these  statements  were  made  up  by  Ms.  Showman  in  order 

13  to  make  my  client  look  bad. 

14  So  for  those  reasons  we  request  that  the  Court  under  R.C.M. 

15  905(f)  reconsider  both  the  rebuttal  and  the  404(b)  ruling,  and 

16  determine  that  Ms.  Showman  is  not  relevant. 

17  MJ:  All  right.  Thank  you.  Government? 

18  ATC [CPT  OVERGAARD] :  Yes,  ma'am.  Before  Ms.  McNamara  testified, 

19  the  government  did  object  to  that  testimony.  And  the  defense 

20  specifically  stated  they  were  offering  it  for  motive  and  plan  of  the 

21  accused.  And  we  did  object,  too,  based  on  the  time  period.  And  that 

22  time  period  is  the  same  time  period  in  which  the  statement  was  made 

23  to  Ms.  Showman.  So  the  statement  does  directly  —  the  statements  of 
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1  Ms.  Showman  will  directly  rebut  what  Ms.  McNamara  said. 

2  Now  the  government  chose  not  to  elicit  this  testimony 

3  during  its  case  in  chief  partially  due  to  —  well,  totally  due  to,  in 

4  fact.  Appellate  Exhibit  470,  which  was  the  court's  ruling  that  if  we 

5  —  that  motive  evidence  was  relevant  to  the  limited  portion  of 

6  knowledge  for  the  Article  194  charge,  but  if  the  government  opened 

7  the  door  with  Ms.  Showman,  then  all  of  the  accused's  state  of  mind 

8  would  be  able  to  come  in  as  evidence.  So  the  government  chose  not  to 

9  elicit  that  in  the  case  in  chief.  But  after  the  defense  elicited 

10  testimony  directly  contrary  to  what  Ms.  Showman  will  testify  what  the 

11  accused  motive  or  what  his  implied  motive  was,  the  government  is 

12  choosing  now  to  call  her  back  in  rebuttal  now. 

13  CDC[MR.  COOMBS]:  Ma'am,  the  government  keeps  using  the  word 

14  "motive".  We  never  used  the  word  motive  at  all  with  Ms.  McNamara. 

15  We  used  state  of  mind  803(3)  —  then  existing  state  of  mind.  And  the 

16  Court  clarified  that  you  are  eliciting  then  existing  state  of  mind 

17  from  your  client?  Yes.  And  everything  she  testified  to  was  that  he 

18  was  a  humanist,  that  he  cared  about  human  life,  that  he  was  studying 

19  and  reading  in  order  to  better  prepare  so  he  could  provide  better 

20  information  to  his  commanders  so  hopefully  he  could  save  lives,  and 

21  he  was  concerned  about  the  lives  of  Soldiers,  Marines,  civilian 

22  contractors,  and  local  nationals.  And  so  in  that  regard  Ms.  McNamara 

23  did  not  testify  to  any  motive.  I  mean,  the  government's  using  that 
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1  word  now  to  say  now  we  should  be  able  to  bring  motive  in,  but  we 

2  never  offered  Ms.  McNamara  as  motive  evidence. 

3  ATC [CPT  OVERGAARD] :  We  can  —  I  mean,  we  can  review  the  record 

4  ma'am.  But  the  government's  —  been  raised  it  was  for  planning 

5  motive.  And  the  state  of  mind  of  the  accused  or  the  motive,  well  - 

6  I  mean,  we  could  call  Ms.  Showman's  testimony  state  of  mind  as  well 

7  It  would  go  to  rebut  the  accused's  state  of  mind  at  the  exact  time 

8  Ms.  McNamara  testified  to  his  state  of  mind. 

9  MJ:  All  right,  well,  the  state  of  mind  is  relevant  to  the 

10  motive  basically.  The  court  finds  it  is  proper  rebuttal.  It's  not 

11  sandbagging.  It's  --  under  Murphy,  the  Court,  also,  is  going  to 

12  adhere  to  its  original  ruling  on  404 (b) .  The  reliability  of  the 

13  witnesses  is  a  weight  question  that  goes  to  the  fact  finder.  Go 

14  ahead  and  call  her. 

15  ATC [CPT  OVERGAARD]:  The  United  States  recalls  Special  —  or  Ms 

16  Jihrleah  Showman. 

17  [END  OF  PAGE] 

18 
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1  JIHRLEAH  SHOWMAN,  civilian,  was  recalled  as  a  witness  for  the 

2  prosecution,  was  reminded  of  her  previous  oath,  and  testified  as 

3  follows : 

4  DIRECT  EXAMINATION 

5  Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

6  Q.  Now,  Ms.  Showman,  when  you  last  testified,  when  did  you  say 

7  you  arrived  at  Fort  Drum? 


8 

A. 

I  arrived  approximately  March  of  2009. 

9 

Q. 

And  what  was  your  relationship  with  the  accused  when  you 

10 

were  in 

garrison  before  you  deployed? 

11 

A. 

I  was  the  —  I  was  his  team  leader. 

12 

Q. 

And  when  was  that  approximately? 

13 

A. 

I  became  the  35  Foxtrot  team  leader  as  well  as 

Manning ' s 

14 

around 

the  first  part  of  April  2009. 

15 

Q. 

And  in  this  capacity  did  you  interact  with  PFC 

Manning 

16 

daily? 

17 

A. 

Yes . 

18 

Q. 

And  did  you  discuss  personal  topics? 

19 

A. 

There  were  personal  topics  discussed,  yes. 

20 

Q. 

You  drove  him  different  places? 

21 

A. 

Correct . 

22 

Q. 

So  in  that  position  were  you  also  responsible 

for 

23 

counseling  PFC  Manning? 

10725 


o 


9 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


A.  Yes. 

Q.  And  just  —  in  general,  why  did  you  counsel  him? 

A.  Mainly  just  to  keep  him  informed  and  see  where  he  was 

personally  as  well  as  professionally.  Any  —  any  improvements  that 
needed  to  be  made  or  any  good  things  that  needed  to  be  documented. 

Q.  And  how  often  did  you  counsel  him? 

A.  Once  a  month,  unless  event  oriented  counselings  need  to  be 
—  needed  to  be  conducted. 

Q.  And  what  are  event  oriented  counselings? 

A.  If  there  was  a  specific  event  that  would  indicate  possible 
corrective  action  or  an  incident  that  would  need  documentation,  it's 
kind  of  a  sit-down  with  him  to  discuss  the  —  the  things  that  needed 
to  be  improved  upon,  what  actually  happened,  and  where  we  go  from 
there . 

Q.  And  during  these  counselings,  did  you  ever  ask  PFC  Manning 
his  motivation  for  joining  the  military? 

A.  Yes. 

Q.  Do  you  remember  when  that  was? 

A.  That  was  approximately  August  timeframe. 

Q.  How  do  you  remember  that  date? 

A.  It  was  after  the  JRTC  rotation  that  the  shop  went  — 
attended. 
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1  Q.  And  where  was  it  —  when  was  it  in  regard  to  your 

2  deployment? 

3  A.  It  was  before  deployment.  We  deployed  in  October  of  that 

4  year,  so  it  was  a  couple  months  before. 

5  Q.  And  do  you  remember  what  the  accused's  response  was  when 

6  you  asked  him  that  question? 

7  A.  He  indicated  that  he  joined  the  military  mainly  for 


8 

training 

and  educational  benefits. 

9 

Q. 

And  did  you  prompt  him  to  elaborate  on  that? 

10 

A. 

Yes  I  did. 

11 

Q. 

And  what  did  do  you? 

12 

A. 

I  asked  him  —  due  to  the  fact  that  it  was  kind  of 

an 

13 

answer  that  every  Soldier  gives,  I  wanted  something  a  little 

bit  more 

14 

in-depth. 

And  so  I  tapped  the  flag  on  my  shoulder  and  I  asked  him 

15 

what  the 

flag  meant  to  him. 

16 

Q. 

And  what  was  his  response? 

17 

A. 

He  said  the  flag  meant  nothing  to  him.  And  he  did 

not 

18 

consider 

himself  part  of  —  did  not  consider  himself  to  have 

19 

allegiance  to  this  country  or  any  people. 

20 

ATC [CPT  OVERGAARD] :  Thank  you. 

21 

[END  OF  PAGE] 

22 
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1  CROSS-EXAMINATION 

2  Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

3  Q.  I  want  to  start  off  by  asking  you  a  few  questions  about 

4  what  you  just  testified  to,  okay,  Ms.  Showman? 

5  A.  Yes,  sir. 

6  Q.  No  one  was  at  this  conversation  besides  you  and  PFC 

7  Manning,  is  that  correct? 

8  A.  Correct. 

9  Q.  And  this  was  a  verbal  counseling  session  between  you  and 

10  PFC  Manning? 

11  A.  Correct. 

12  Q.  When  you  asked  him  —  you  testified  on  direct,  you  asked 

13  him  why  you  joined  the  Army? 

14  A.  Yes. 

15  Q.  And,  in  fact,  he  told  you  that  he  joined  the  Army  because 

16  he  needed  money  for  college? 

17  A.  Correct. 

18  Q.  He  also  told  you  he  joined  the  Army  so  that  he  could  learn 

19  more  about  computers? 

20  A.  Yes. 

21  Q.  And  during  that  conversation  you  apparently  interpreted  his 

22  body  language  as  not  really  caring  about  the  counseling  session? 

23  A.  He  —  he  had  his  typical  stance;  just  kind  of  putting  up 
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with  the  conversation. 

Q.  My  question  to  you  was,  during  that  conversation,  you 
interpreted  his  body  language  as  not  really  caring  about  the 
counseling? 

A.  I  can't  confirm  that  or  deny  that. 

Q.  So  you  have  no  opinion  as  to  how  you  interpreted  his  body 
language? 


A.  It  appeared  as  though  —  he  didn't  seem  distraught  by  the 
counseling  session  or  the  fact  that  he  was  bothered  by  it. 

Q.  Listen  to  my  question.  Could  you  see  from  his  body 
language  whether  or  not,  in  your  opinion,  he  was  not  caring  about  the 
counseling  session? 

A.  I  did  not  see  that  actually  —  not  at  that  point. 

Q.  Based  upon  his  body  language,  you  were  not  happy? 

A.  I  was  not  —  I  was  not  unhappy  at  that  time. 

Q.  Well,  that's  why  you  tapped  your  shoulder,  correct,  the 

flag - 

A.  No - 


Q.  -  the  flag,  what  does  that  mean? 

A.  -  that's  incorrect,  sir. 

Q.  You  didn't  tap  your  shoulder  because  you  were  upset? 
A.  No,  I  did  not  tap  my  shoulder  because  I  was  upset. 
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Q.  And  when  you  tapped  your  —  your  shoulder  on  the  flag,  you 
asked,  what  does  that  mean  to  you? 

A.  Correct. 

Q.  And  you  did  this  because  you  were  upset? 

A.  No. 

Q.  And  you  —  he  told  you  at  that  point  that  you  can't  have 
blind  allegiance  to  a  flag? 

A.  Not  at  that  point,  no. 

Q.  He  told  you  you  can't  have  blind  —  blind  allegiance  to  a 

flag? 

A.  I  don't  remember  him  saying  that. 

Q.  He  told  you  that  you  cannot  be  an  automaton? 

A.  I  do  not  recall  that  phrase  at  all,  sir. 

Q.  You  don't  recall  that? 

A.  No. 

Q.  And  he  then  told  you  that  you  had  to  have  duty  to  all 
people  regardless  of  their  country? 

A.  I  do  not  recall  that. 

Q.  You  don't  recall  that? 

A.  No,  sir. 

Q.  You  got  very  upset  at  the  time  that  he  made  these 
statements? 
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1  A.  The  statements  that  I  indicated  that  he  made,  it  did  bother 

2  me . 

3  Q.  Bothered  you  —  I  mean,  it  made  you  upset? 

4  A.  Correct.  As  an  American  and  as  a  fellow  Soldier,  I  was 

5  distraught  by  the  statements  he  had  made. 

6  Q.  And  you  interpreted  his  statements  to  be  disloyal  to 

7  America? 


8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


A.  Correct. 

Q.  Now  once  you  did  that,  you  never  reduced  the  --  this 
counseling  session  to  a  written  counseling  form,  did  you? 

A.  Not  at  that  time,  no. 

Q.  Not  ever? 

A.  Not  —  no,  sir. 

Q.  And  prior  to  2010  —  the  arrest  of  PFC  Manning  in  May  of 

2010,  you  never  reduced  this  allegation  to  writing? 

A.  Correct. 

Q.  Now  if  you  really  thought  that  PFC  Manning  said  disloyal 
comments  to  America,  that  would  be  a  serious  matter,  wouldn't  it? 

A.  It  is  a  serious  matter,  sir. 

Q.  Listen  to  my  question.  That  would  be  a  serious  matter, 
wouldn't  it? 

A.  Yes. 
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1  Q.  And  it  would  be  a  serious  matter  because  he  had  a  Top 

2  Secret  clearance. 


3  A. 

Correct . 

4  Q. 

It  would  be  a  serious  matter  because  he  had  access  to 

5  classified  information? 


6  A. 

Correct . 

7  Q. 

It  would  be  a  serious  matter  because  he's  an  analyst  —  an 

8  all-source  analyst? 


9  A. 

Correct . 

10  Q. 

And  you're  his  supervisor  at  this  time? 

11  A. 

Correct . 

12  Q. 

You  heard  of  the  phrase,  I'm  sure,  that  if  it's  not  in 

13  writing, 

it  didn't  happen?  You've  heard  of  that  phrase  with  regards 

14  to  counselings,  haven't  you? 


15  A. 

I'm  sure  at  one  point  I  have  heard  that. 

16  Q. 

Yeah,  and  that  phrase  basically  means  that  you  need  to 

17  document 

things,  right? 

18  A. 

Correct . 

19  Q. 

And,  in  fact,  you  said  on  direct  that  you  would  counsel 

20  things  that  you  needed  to  document? 


21  A. 

Correct . 

22  Q. 

And  yet  you  didn't  counsel  this;  you  didn't  put  it  in 

23  writing? 
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A.  I  did  not. 

Q.  Now  you  have  counseled  PFC  Manning  in  the  past? 

A.  Yes. 

CDC [MR.  COOMBS]:  Can  I  get  Defense  Exhibit  QQ  [retrieving  the 

document  from  the  court  reporter] . 

[Pause] 

CDC[MR.  COOMBS]:  I'm  showing  the  witness  what's  been  marked 

as  Defense  Exhibit  QQ  for  identification  [handing  the  document  to  the 
witness] . 


Take  a  moment,  Ms.  Showman,  and  thumb  through  that,  and 
when  you're  done,  just  look  up  at  me. 

[The  witness  did  as  directed.] 

Q.  Now  you  recognize  these  documents? 

A.  I  do. 

Q.  These  are  counseling  statements  that  you  did  for  PFC 
Manning? 


A.  Correct. 

Q.  And  there  are  three  counseling  statements  in  this  exhibit? 
A.  Yes. 

Q.  Let's  discuss  the  first  one,  okay? 

A.  All  right. 

Q.  This  first  one  is  your  initial  counseling  statement,  is 
that  correct? 
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1  A.  Yes. 

2  Q.  That's  when  you  became  his  new  team  leader? 

3  A.  Correct. 

4  Q.  And  you  counseled  him  there  basically  on  your  expectations 

5  and  his  duties? 

6  A.  Correct. 

7  Q.  And  in  that  counseling  statement  you  noted  that  PFC  Manning 

8  seemed  to  have  an  excessive  caffeine  consumption.  Do  you  see  that? 

9  A.  Yes. 


10 

Q. 

You  also  told  him  that  it  was  your  obligation  to  hold  him 

11 

to  standard? 

12 

A. 

Correct . 

13 

Q. 

And  later  that  same  day  you  did  hold  him  to  standard. 

14 

correct? 

15 

A. 

Yes. 

16 

Q. 

Let's  look  at  the  second  counseling  statement. 

17 

[The 

witness  did  as  directed.] 

18 

Q. 

In  that  second  counseling  statement,  you  counseled  him  for 

19 

being  late  to  formation? 

20 

A. 

Correct . 

21 

Q. 

And  also  for  basically  losing  his  military  bearing? 

22 

A. 

Yes. 

23 
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1  Q.  And  you  told  him  in  that  counseling  statement  that  his 

2  actions  were  unacceptable  and  will  not  --  would  not  be  tolerated? 


3 

A. 

Correct . 

4 

Q. 

You  noted  your  duty  to  inform  him  of  any  deficiency? 

5 

A. 

Yes . 

6 

Q. 

You  also  noted  it  was  your  duty  to  provide  corrective 

7 

training? 

8 

A. 

Correct . 

9 

Q. 

Now  in  this  written  —  written  counseling,  you  also  noted 

10 

that  you 

had  a  duty  on  uphold  the  Army  Values? 

11 

A. 

Correct . 

12 

Q. 

And  in  addition  to  this  event  counseling,  you  also  gave 

13 

monthly  performance  counselings,  correct? 

14 

A. 

Yes . 

15 

Q. 

Let's  look  at  the  third  one. 

16 

[The 

witness  did  as  directed.] 

17 

Q. 

Now,  this  is  a  monthly  counseling  session  for  June  of  2009, 

18 

correct? 

19 

A. 

Yes . 

20 

Q. 

And  in  this  counseling  statement  you  noted  that  PFC  Manning 

21 

was  a  smoker? 

22 

A. 

Correct . 

23 
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Q.  And  you  noted  that  because  you  said,  hey,  per  regulation, 
you're  not  going  to  get  additional  time  for  smoke  breaks? 

A.  Correct. 

Q.  You  wanted  him  to  know  that? 

A.  Correct. 

Q.  And  you  told  him  actually  he  would  have  to  request 
permission  for  smoke  breaks? 

A.  Correct. 

Q.  And  in  this  counseling  statement  you  also  recommended  him 
for  Soldier  of  the  month  board? 

A.  Yes. 

Q.  So  it ' s  clear  you  had  the  ability  to  counsel  him  on  some 
kind  of  minor  points,  correct? 

A.  Correct. 

Q.  Such  as  being  a  smoker,  drinking  too  much  caffeine? 

A.  Correct. 

Q.  And  if  you  could  do  that  —  if  you  can  do  that  in  writing, 
why  didn't  you  reduce  the  alleged  statements  —  the  disloyal 
statements  that  you  say  he  said  to  writing? 

A.  As  a  leader,  I  felt  that  I  had  reached  my  limitation  with 
the  issue,  so  I  took  it  to  a  higher  supervisor.  So  I  took  it 
immediately  to  Sergeant  Mitchell  and  Sergeant  Adkins. 
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Q.  As  a  leader  you  felt  you  reached  your  limitations.  What 
does  that  mean? 

A.  That  means  if  it's  an  issue  —  as  a  specialist  in  the 
United  States  Army  that  I  felt  I  did  not  have  really  the  knowledge, 
background,  or  the  capability  of  writing  a  counseling  statement  that 
needed  to  be  thoroughly  elaborated  to  that  extent.  I  needed  to  take 
it  to  my  superiors. 

Q.  Oh,  we  need  to  break  that  down.  You  felt  you  couldn't 
write  the  counseling  statement? 


A. 

That's  not  what  I  said,  sir. 

Q. 

All  right,  I  want  to  make  sure  I  understand  what  you  said. 

So  why  didn't  you  write  a  counseling  statement  that  said,  hey,  during 
verbal  counseling  statement  I  tapped  my  shoulder  and  out  of  the  blue 
PFC  Manning  said  I  have  no  loyalty  to  this  country;  the  flag  means 


nothing 

to  me? 

A. 

I  was  instructed  not  to  write  the  counseling  statement. 

Q. 

You  were  what? 

A. 

Instructed  not  to  write  it.  That  it  would  be  handled  by 

someone 

else . 

Q. 

Okay.  Well,  we'll  get  to  that  - 

A. 

Okay. 
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Q.  -  because  that's  a  new  statement.  So  let's  go  before 

you  get  to  the  instruction  of  not  writing  it.  Why  didn't  you  write 
the  counseling  statement  right  then  and  there? 

A.  Because  that's  not  how  it's  done,  sir.  You  don't  write  a 
counseling  statement  right  on  —  on  the  spot. 

Q.  Why  not? 

A.  That's  not  how  I  was  trained  to  do  counseling  statements. 
You  verbally  counsel  them  - 

Q.  Right? 

A.  -  and  then  you  go  from  there.  And  then  typically  you  go 

and  get  on  a  computer,  write  up  a  counseling  statement,  and  then  - 

Q.  When  do  you  typically  do  that? 

A.  Depending  on  —  depending  on  where  —  when  it  happened 
during  the  day.  A  lot  of  the  time  the  next  day. 

Q.  Well,  let's  look  at  your  —  let's  go  back  to  your  second 
statement  —  the  second  counseling  statement.  He  was  late  to 
formation;  when  did  you  counsel  him  on  that  day? 

A.  The  next  day. 

Q.  You  counseled  him  the  next  day? 

A.  I  believe  so.  Let  me  check. 

[Pause  while  the  witness  looked  through  the  document.] 

Q.  Take  a  look  at  the  date  in  which  PFC  Manning  signs  it. 


10738 


9 


9 


1 

2 

3 

4 

5 

6 

7 

8 
9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 
21 
22 
23 


A.  If  you  will  see,  sir,  date  of  counseling  is  the  7th  of 
April  — 


Q.  Right. 

A.  —  and  the  event  happened  on  the  6th  of  April. 

Q.  Okay.  And  so  you  counseled  him  the  next  day  on  this  — 

A.  Correct. 

Q.  —  on  this  missing  formation  stuff? 

A.  Correct. 

Q.  And  so  —  I  guess  from  your  standard  how  you  do  things,  you 
would  counsel  him  the  next  day  on  these  so-called  disloyal 
statements? 


A.  It  --  it  happened  in  the  evening,  sir.  It  happened  at  the 

end  of  shift.  And  typically  - 

Q.  All  right.  So  maybe  —  maybe  we'll  give  you  a  day  break. 
And  you'd  counsel  him  the  second  day,  wouldn't  you? 

A.  It  need  —  if  that  —  if  that  was  my  duty,  yes. 

Q.  Well,  wasn't  it  your  duty?  You  said  it  was  your  duty  to 
hold  him  to  standard? 

A.  I  had  handed  off  the  issue  to  my  superior. 

Q.  Who  did  you  hand  the  issue  off  to? 

A.  To  Sergeant  Mitchell  and  Sergeant  Adkins. 

Q.  Sergeant  Mitchell  and  Sergeant  Adkins  is  you  have  - 

A.  Correct. 
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Q.  Okay.  I  suppose  from  your  answer  then  one  of  those  people 
told  —  instructed  you  not  to  write  a  counseling  statement? 

A.  They  told  me  they  would  handle  —  they  would  take  care  of 
the  counseling  statement. 

Q.  Listen  to  my  question.  Did  one  of  those  people  instruct 
you  not  to  write  a  counseling  statement? 

A.  Correct. 

Q.  Who? 

A.  It  was  Sergeant  Adkins. 

Q.  Sergeant  Adkins  instructed  you  not  to  write  a  counseling 
statement? 

A.  Correct. 

Q.  That's  your  testimony? 

A.  Yes. 

Q.  All  right.  And  did  you  ask  Sergeant  Adkins  why  you're 
instructing  me  not  to  write  a  counseling  statement? 

A.  Yes,  I  did. 

Q.  Okay,  and  what  did  Sergeant  Adkins  tell  you? 

A.  He  said  he  would  take  care  of  it.  He  would  handle  the 
counseling  statement. 

Q.  That  he  would  counsel  him? 

A.  Correct. 

Q.  For  something  that  he  wasn't  there  for? 
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A.  Correct. 

Q.  Did  you  —  did  you  ask  Sergeant  Adkins  why  he  would  do 

that? 

A.  I  —  I'm  assuming  I  probably  would  have,  but  I  couldn't 
give  you  a  verbatim  of  what  I  actually  would  have  said. 

Q.  Okay,  and  were  you  present  —  I  mean,  again,  my 
understanding  --  you're  his  first  line  supervisor,  right? 

A.  Correct. 

Q.  Were  you  present  for  Sergeant  Adkins'  writing  up  this 
second  counseling  statement? 

A.  No. 

Q.  Did  Sergeant  Adkins  ever  write  a  counseling  statement  up? 
A.  Not  to  my  knowledge. 

Q.  Did  you  go  back  to  Sergeant  Adkins  and  say  why  didn't  you 
write  a  counseling  statement? 

A.  Yes. 

Q.  And  what  did  Sergeant  Adkins  tell  you  then? 

A.  I  —  I  don't  know  exactly  what  he  told  me,  sir. 

Q.  Well,  do  you  recall  going  back  to  him  and  asking  him  about 

this  second  counseling  statement? 

A.  Correct. 

Q.  And  when  was  that? 
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A.  That  was  approximately  —  probably  within  —  within  a  few 
days  after  the  incident. 

Q.  Okay.  So  your  testimony  is  Sergeant  Adkins  tells  you  not 
to  write  the  counseling  statement,  says  he  will  do  it,  right? 

A.  Correct. 

Q.  And  you  see  it's  not  done,  is  that  right? 

A.  Well  —  well,  I  assumed  it  wasn't  done. 

Q.  Okay.  You  assume  it's  not  done.  Why  did  you  assume  it 

wasn't  done? 

A.  Well,  they  hadn't  communicated  with  —  communicated  to  me 
that  it  had  been  done.  They  also  did  not  have  to  communicate  that 
information  with  me. 

Q.  When  you  say  they,  who  are  you  saying? 

A.  Sergeant  —  Sergeant  Mitchell,  who  was  my  superior  - 

Q.  Right. 

A.  -  and  Sergeant  Adkins,  who  was  above  Sergeant  Mitchell. 

Q.  Okay.  So  they  didn't  communicate  to  you  that  the 
counseling  was  done.  And  then  you  felt  the  need  to  inquire? 

A.  Correct. 

Q.  And  who  did  you  inquire? 

A.  I  believe  —  I  —  my  assumption  is  that  I  would  have 
inquired  —  spoken  to  Sergeant  Mitchell  before  I  spoke  to  Sergeant 
Adkins  about  the  issue.  So  I  probably  would  have  asked  both  of  them. 
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Q.  All  right.  But  you  recall  asking  Sergeant  Adkins 
specifically? 


A. 

Correct . 

Q. 

And  Sergeant  Adkins  told  you  what? 

A. 

He  told  me  —  I  actually  don't  remember  what  he  told  me, 

but  he  indicated  to  me  that  the  situation  was  being  handled 


Q. 

And  did  he  tell  you  how? 

A. 

No.  Not  that  I  remember. 

Q. 

All  right.  Did  --  when  --  I  guess  now  he  says  it's  been 

handled 

or  it's  going  to  be  handled.  Did  you  at  a  later  date  verify 

whether 

or  not  the  counseling  statement  was  done? 

A. 

I  did  not  verify  whether  a  counseling  statement  had  been 

done  at 

a  later  date. 

Q. 

Why  not? 

A. 

I  honestly  was  getting  ready  for  deployment,  and  I  had  many 

mission 

essential  taskings  to  take  place  and  left  it  up  to  Sergeant 

Adkins  to  handle 


Q. 

Do  you  see  how  your  allegations  would  be  important  to 

capture 

in  a  written  statement? 

A. 

I  can  see  that,  yes. 

Q. 

Yeah.  And  it  would  be  important  because  then  we  wouldn't 

have  to 

rely  upon  your  memory  right  now  would  we? 

A. 

Correct . 
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1 

Q 

We'd  have  a  counseling  statement? 

2 

A 

Correct . 

3 

Q 

And  we  don't  have  that? 

4 

A 

I  understand  that,  sir. 

5 

Q 

We  don't  have  that,  do  we? 

6 

A 

No  we  —  we  don't. 

7 

Q 

And  you  claim  that  apparently  you 

went  to  Sergeant 

Adkins 

8 

to  get 

the  counseling  statement  done  by  him 

,  right? 

9 

A 

Yes. 

10 

Q 

And  you  also  apparently  told  him 

exactly  what  you 

allege 

11 

PFC  Manning  said? 

1 

12 

A. 

Yes. 

13 

Q. 

So  you  told  Sergeant  Adkins  that 

PFC  Manning  said 

the  flag 

14 

meant  nothing  to  him,  he  had  no  loyalty  to 

this  country? 

15 

A. 

Yes. 

16 

Q. 

That's  what  you  told  him? 

17 

A. 

Yes . 

18 

Q. 

Now  you  even  claim  at  a  later  date  that  you  told  Sergeant 

19 

Adkins 

that  you  thought  PFC  Manning  was  a  possible  spy? 

20 

A. 

Yes. 

21 

Q. 

Those  were  your  words  - 

22 

A. 

Yes. 

23 

Q. 

-  possible  spy? 
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A.  Yes. 

Q.  And  what  made  you  think  at  that  point  he  was  a  possible 


spy? 


A.  Everything  that  kind  of  led  up  to  —  to  specific 
circumstances  and  —  just  due  to  my  training  —  anyone  that  is  kind 
of  questionable,  I  just  kind  of  feel  that  they  should  be  treated  as 
though  their  actions  are  questionable  as  far  as  being  someone  that 

8  would  gather  information  and  disseminate  them  to  —  to  foreign 

9  individuals. 

Well,  when  you're  telling  him  he's  a  possible  spy  it's  at 
11  the  time  that  you're  recording  these  two  statements? 

A.  It  —  it  was  within  that  week. 

Okay,  and  what  did  you  know  within  that  week  —  because  as 

14  far  as  I  know  it's  the  alleged  statement  about  the  flag  and  no 

15  loyalty.  What  in  that  week  did  you  know  that  made  you  think  he  was  a 
py? 

It  was  his  actions  up  to  that  point,  sir. 

Q.  What  actions? 

A.  The  —  the  reaction  by  the  —  missed  formation,  the  fact 
you - 

Q.  Okay,  let's  break  it  down. 


10 

Q. 

11 

the  time 

12 

A. 

13 

Q. 

14 

far  as  I 

15 

loyalty. 

16 

possible 

17 

A. 

18 

Q. 

19 

A. 

20 

that  you 

21 

Q. 

22 

A. 

23 
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Q.  So  we'll  go  each  one.  Missed  formation;  how  did  that  make 
him  a  possible  spy? 

A.  That  indicated  someone  that  may  not  be  able  to  handle  high 
stress  levels  in  a  job  as  an  intel'  --  intelligence.  I'm  not  a 
doctor,  so  that  is  just  my  personal  opinion.  So  that  made  me  kind  of 
question  things.  But  at  that  time  I  didn't  feel  that  he  could  have 
been  a  possible  spy.  I  just  met  the  individual  within  the  month. 

Q.  Well,  I  only  want  to  concentrate  on  those  facts  - 

A.  Right. 

Q.  -  that  you  relied  upon  to  say  I  think  he's  a  possible 

spy. 

A.  Right. 

Q.  Okay,  so  let's  just  concentrate  on  that? 

A.  Okay. 

Q.  So  give  me  your  first  fact. 

A.  First  fact  is  the  --  it  —  I  have  to  use  that  first 
incident  because  it  —  it  helped  lead  up  to  the  point  that  I  felt 
that  he  could  have  been  questionable.  So  I  contin  —  I  keep  that  in 
my  statement  that  his  reaction  after  missed  formation  could  possibly 
lead  up  to  that.  And  then  whenever  you  would  ask  him  to  do  things, 
he  would  handle  the  task  very  enthusiastically.  But  any  time  you 
tried  to  pull  him  off  of  that  task,  especially  if  it  was  a  computer 
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task,  he  would  appear  to  be  very  flustered  and  not  really  be  able  to 
function  properly  after  that  point. 

Q.  Okay,  let's  stop  there  then. 

A.  Okay. 

Q.  What  made  that  fact,  in  your  mind,  say  this  is  a  possible 

spy? 

A.  The  —  I  —  I  felt  as  though  —  it  just  wasn't  —  it  wasn't 
normal  for  someone  that  should  be  handling  classified  information. 

It  was  honestly  a  feeling  in  my  gut  more  than  anything.  Someone  that 
was  displaying  that  type  of  behavior  - 

Q.  Well,  I  understand  - 

A.  -  and  knowing  —  having  knowledge  that  I  had  of  what  — 

what  we  are  to  look  for  with  people  that  could  possibly  disseminate 
secret  information. 

Q.  Okay.  So  now  I  get  a  fact.  So  that's  what  I  want  to  get 
to.  Like  —  I  understand  you  might  think  his  reaction  was  not  to  -- 
to  standard.  But  taking  that  reaction  to  a  conclusion  where  you  say 
I  think  he's  a  spy,  that's  what  I  was  trying  to  connect.  So  you  say, 
based  upon  his  reaction,  then  that  would  lead  to  somebody  that  you 
couldn't  trust;  is  that  what  you're  saying? 

A.  Yes.  If  —  if  —  we  actually  —  there  are  lists  in  the 
military  of  things  to  watch  for  in  individuals  that  could  be 
potential  risks.  And  - 
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Q.  Okay.  And  what  were  you  —  from  that  list,  can  you  recall 
what  you  noted  in  order  to  say  I  think  he's  a  spy? 

A.  Abnormal  outbursts,  mental  situations,  just  kind  of  acting 
very  protective  of  their  time  on  classified  information.  Just  little 
—  little  things  that  would  kind  of  instantly  change  in  someone's 
personality  when  dealing  with  classified  information. 

Q.  All  right.  Anything  else  that  you  identified  in  order  to 
think  in  your  mind  he's  a  possible  spy? 

A.  Yes,  there  was  a  conversation  that  he  had  with  me  that, 
combined  with  all  the  other  things,  made  me  really  wonder. 

Q.  At  --  before  you  went  to  Sergeant  Adkins? 

A.  Yes,  it  actually  happened  before  I  went  to  Sergeant  Adkins. 

Q.  Okay.  And  that  conversation,  I  take  it  is  —  is  what?  He 
had  to  scrub  the  internet  - 

A.  Correct. 

Q.  -  is  that  the  conversation? 

A.  Correct. 

Q.  All  right.  So  why  don't  we  talk  about  that. 

A.  All  right. 

Q.  What  did  he  say? 

A.  He  said  that  before  he  joined  the  military,  he  had  to  make 
sure  that  he  removed  everything  with  his  name  on  it  to  include  blogs 
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and  things  like  that  from  the  internet  otherwise  he  would  not  have 
received  a  Top  Secret  clearance. 

Q.  And  did  you  know  at  that  point  he  was  gay? 

A.  No,  I  didn't  know  that  he  was  gay. 

Q.  Did  you  suspect  that  he  was  gay? 

A.  I  had  —  I  had  an  assumption  that  he  probably  was. 

Q.  And  was  it  possible  he  was  talking  about  his  statements  and 
his  affiliation  with  blogs  about  "Don't  Ask,  Don't  Tell",  and 
basically  gay  agenda  issues? 

A.  It  is  —  it  is  possible. 

Q.  Okay.  So  anything  else,  besides  that,  that  caused  you  to 
think,  you  know  what,  he's  a  spy? 

A.  That,  as  well  as  a  conversation  he  had  with  myself  and 
Sergeant  Adkins.  I  don't  remember  the  timeline.  I  believe  it  was 
after  JRTC  that  we  sat  down  with  him  and  had  a  conversation. 

Q.  Okay.  What  was  in  that  conversation? 

A.  He  indicated  that  he  was  very  paranoid  that  people  were 
listening  in  on  his  conversations  and  he  couldn't  --  he  couldn't 
trust  his  work  environment. 

Q.  And  could  that  be  —  have  anything  to  do  with  possibly 
being  gay  and  serving  in  the  military? 

A.  I  do  not  think  so  because  he  —  to  my  knowledge,  never 
spoke  about  being  gay  in  the  office. 
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Q.  And  that  was  because  there  was  a  policy,  "don't  ask,  don't 
tell",  right? 

A.  Correct. 

Q.  All  right.  Anything  else  besides  that? 

A.  Not  —  not  that  really  comes  to  mind  at  this  time. 

Q.  Okay.  So  then  you  go  to  Sergeant  Adkins  and  you  say  what 
PFC  Manning  allegedly  said  to  you  and  then  you  say  I  think  he's  a 
possible  spy.  You  used  those  words? 

A.  Correct. 

Q.  And  what  does  Sergeant  Adkins  do  in  response  to  that? 

A.  He  kind  of  looked  at  me  and  said,  all  right.  I'm  pretty 
sure  we  had  a  discussion  how  to  try  to  get  him,  you  know,  the  help  he 
needs  because  if  he's  overly  stressed  then,  you  know,  maybe  we  can 
help  him  with  that.  Maybe  it's  just  something  that  we're  assuming. 

He  didn't  necessarily  entertain  the  idea  that  I  project  —  presented 
to  him. 

Q.  Okay.  So  you  go  to  him  and  you  say,  hey,  I  just  was  with 
PFC  Manning.  I  counseled  him.  He  said  the  flag  means  nothing  to  me. 
I  have  no  loyalty  to  this  country.  You  know,  Sergeant  Adkins,  I 
think  he's  a  spy?  You  say  that? 

A.  Correct. 

Q.  And  Sergeant  Adkins  doesn't  entertain  that? 

A.  He  didn't  entertain  the  "I  think  he's  a  spy"  statement. 
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1  Mainly  because  it's  his  Soldier  and  he  would  like  to  give  him  the 

2  benefit  of  the  doubt.  So  he  said  he  would  handle  the  situation.  And 

3  - 


4  Q. 

But  you're  his  Soldier,  too,  right? 

5  A. 

Correct . 

6  Q. 

And  you're  the  supervisor? 

7  A. 

Correct . 

8  Q. 

All  right.  So  you  tell  him  this  —  and  —  I  guess  when 

9  you're  telling  him  this  you  believe  what  you're  saying,  right? 


10  A. 

I  believe  it,  yes. 

11  Q. 

All  right.  So  when  Sergeant  Adkins  hears  this,  he  doesn't 

12  actually  do  anything?  Does  he  —  does  he  do  anything  at  that  point? 

13  A.  At  that  point,  I  believe  he  stepped  out  of  the  room.  I  was 

14  actually  released  for  the  evening  before  Manning  was.  So  I'm  not 

15  sure  what  he  did  directly  after  our  conversation. 

16  Q.  I  imagine  you've  never  had  one  of  your  Soldiers  say  he  had 

17  no  loyalty  to  the  country? 


18  A. 

Never. 

19  Q. 

So  this  would  be  a  big  event  for  you? 

20  A. 

Correct . 

21  Q. 

So  when  nothing  was  done  at,  you  know,  day  two,  day  three. 

22  day  four. 

day  five,  what  did  you  do? 

23  A. 

I  went  and  —  and  spoke  with  Sergeant  Adkins. 
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1  Q.  And  what'd  you  say? 

2  A.  I  asked  him  what  is  going  to  be  done.  And  then  as  time 

3  progressed  what  --  what  would  happen  in  the  future. 

4  Q.  Okay.  And  what  did  Sergeant  Adkins  tell  you? 

5  A.  He  told  me  that  he  was  speaking  to  individuals  that  he 

6  needed  to  speak  to.  I'm  assuming  he  was  referring  to  his  superiors. 

7  And  that  they  would  make  the  decision. 

8  Q.  Okay.  And  you  went  —  is  this  the  day  two,  day  three,  when 

9  you  went  to  Sergeant  Adkins? 

A.  Approximately. 

Q.  All  right.  And  then  did  you  ever,  at  a  later  date,  go  back 
12  to  him  and  say,  I'm  —  what's  going  on  with  this  issue? 

A.  Yes  I  did. 

Q.  How  many  times? 

There  were  —  there  was  a  couple  of  times. 

Q.  Okay.  Couple  times  meaning  two  or? 

A.  Meaning  two,  possibly  three. 

And  tell  us  everything  you  know  about  the  first  time. 

The  first  time  we  discussed  he  actually  indicated  to  me 

20  that  he  would  like  me  to  have  Manning  contact  behavioral  health  again 

21  to  see  if  there's  anything  they  can  assist  him  with.  So  I  did  that. 
Q.  Okay. 
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A.  And  then  that's  pretty  much  how  that  first  conversation 

went . 

Q.  Well,  in  that  first  conversation  did  you  say,  well, 
behavioral  health  is  nice,  but  he's  an  analyst,  he  says  he  has  no 
loyalty  to  this  country,  he  shouldn't  be  an  analyst,  did  you  say 
that? 

A.  No. 

Q.  Why  not? 

A.  I  —  because  that's  not  what  I  said  --  because  I  didn't 
have  facts.  I  had  —  I  had  no  solid  facts  to  - 

Q.  Well,  did  you  believe  he  should  be  an  analyst? 

A.  I  --  honestly,  sir,  I  wasn't  an  analyst  long  enough  to 

really  make  that  decision,  but  I  felt  as  though,  no,  he  shouldn't 
have . 

Q.  All  right.  And  do  you  —  I  mean,  I  guess  if  he  had  no 
loyalty  to  the  country  or  flag,  did  you  believe  he  needed  to  be  a 
Soldier? 

A.  No. 

Q.  Okay,  so  did  you  say,  behavioral  health  is  nice,  but  this 
guy  should  not  even  be  a  Soldier? 

A.  I  was  fully  supportive  of  behavioral  health. 

Q.  No.  My  question  was,  though,  did  you  tell  Sergeant  Adkins 
behavioral  health  is  nice,  but  this  guy  should  not  even  be  a  Soldier? 
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1  A.  I  —  I  made  a  statement  that  —  that  we  should  consider 

2  looking  into  whether  he  needs  to  stay  in  the  military. 

3  Q.  All  right.  And  why  did  you  feel  that  you  should  consider 

4  whether  or  not  he  should  remain  in  the  military? 

5  A.  Because  he  —  it  didn't  appear  as  though  he  truly  believed 

6  in  what  it  meant  to  be  a  Soldier. 

7  Q.  Okay.  And  so,  I  guess,  if  you  really  believed  that,  then 

8  why  would  you  just  sit  idly  by  and  let  —  let  one  of  your  Soldiers 

9  then  that  you  believe  didn't  need  to  be  a  Soldier,  had  no  loyalty  to 

10  the  country,  actually  stay  in  the  Army? 

11  A.  I  had  no  control  over  whether  he  stayed  or  —  or  went,  sir. 

12  Q.  Well,  you  did  have  control  about  talking  to  your  chain  of 

13  command,  right? 

14  A.  Correct. 

15  Q.  So  if  you  believed  that,  why  didn't  you  go  over  Sergeant 

16  First  Class  Adkins'  head  when  nothing  was  being  done  to  get  him  out 

17  of  the  Army? 

18  A.  I  honestly  did  not  have  any  information  on  what  was  done  or 

19  was  not  done.  I  did  my  duty  by  going  to  my  superiors.  At  that  point 

20  it  would  have  been  inappropriate  for  me  to  not  trust  Sergeant  Adkins' 

21  word  and  go  above  his  head.  That's  inappropriate. 

22  Q.  Well,  it  might  have  been,  but  when  you're  getting  ready  for 

23  deployment  —  PFC  Manning  deployed  with  you,  right? 
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A.  Correct. 

Q.  And  he  was  one  of  your  Soldiers  when  you  deployed? 

A.  Initially,  yes. 

Q.  Yeah.  You  were  his  supervisor  again? 

A.  Correct. 

Q.  So  you  if  you  really  felt  that  he  had  no  loyalty  to  the 
country,  the  flag  meant  nothing  to  him,  he  was  a  possible  spy,  why 
would  you  deploy  with  this  guy? 

A.  I  was  told  that  the  decision  had  been  made  - 

Q.  All  right. 

A.  -  and  that  there  was  nothing  I  could  do  about  it. 

Q.  Who  told  you  that? 

A.  Sergeant  Adkins. 

Q.  And  at  that  point  did  you  feel  that  perhaps  it  might  be 
appropriate  to  go  over  Sergeant  First  Class  Adkins '  head? 

A.  I  did  not  feel  it  was  appropriate. 

Q.  And  why  not? 

A.  I  honestly  wasn't  —  knowing  —  knowing  my  unit  and  my 
chain  of  command,  they  would  have  want  —  they  would  have  wanted  me 
to  go  through  Sergeant  Adkins  because  that  is  what  is  appropriate  of 
a  specialist.  And  if  I  were  to  just  show  up  at  the  S-2 ' s  door  or  the 
first  sergeant's  door,  the  commander's  door  of  the  company,  they 
would  have  dismissed  me  and  had  me  go  through  Sergeant  Adkins. 
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Q.  Oh  would  they?  Would  —  doesn't  your  commander  or  first 
sergeant  have  an  open  door  policy? 

A.  They  do,  however,  I  did  not  have  an  issue  with  my  first 
line  supervisor,  so  therefore  it  could  have  —  it  was  an  issue  that 
they  could  have  handled. 

Q.  Well,  if  the  commander  and  first  sergeant's  open  door 
policy  is  potentially  you  —  if  you  have  any  issue  you  come  to  me? 

A.  Correct. 

Q.  And  this  would  certainly  be  an  issue? 

A.  It  would  —  it  would  have  been  an  issue,  yeah. 

Q.  Yeah,  it  would  have  been  an  issue  of;  Commander,  I  think 

you  should  know  one  of  your  Soldiers  has  no  loyalty  to  this  country? 

A.  Correct. 

Q.  Why  didn't  you  go  to  your  commander  or  your  first  sergeant 
under  the  open  door  policy? 

A.  I  did  not  feel  that  it  was  appropriate. 

Q.  Because? 

A.  Because  I  —  I  took  it  through  the  appropriate  channels. 

Q.  And  nothing  was  being  done,  right? 

A.  It  —  I  did  not  have  any  knowledge  of  whether  it  was  done 
or  —  I  —  I  did  not  know  how  far  it  went  up  the  chain  of  command. 

Q.  Did  you  ever  ask? 

A.  I - 
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ATC [CPT  OVERGAARD] :  Your  Honor,  objection.  These  questions  have 
been  asked  and  answered  five  different  times. 

MJ:  I'll  let  you  have  a  little  latitude,  but  we  are  asking  the 

same  kinds  of  things.  Go  ahead. 

CDC [MR .  COOMBS]:  Okay,  Your  Honor,  I  don't  believe  I  am.  I'm 

--  I  believe  I'm  exploring  the  basis  for  the  reliability  of  the 
statement  because  if  she  believed  it  you  would  expect  more. 

MJ:  I  understand  where  you're  going  with  it. 

Q.  So  did  you  —  did  you  ask  how  far  it  went  up  the  chain? 

A.  I  didn't  ask  how  far.  I  asked  if  he  actually  spoke  to 

individuals  that  could  have  made  the  decision  and  he  said  he  did. 

Q.  Okay,  so  then  Master  Sergeant  Adkins  told  you  he  spoke  to 
people  who  could  make  a  decision? 

A.  Correct. 

Q.  And  who  —  did  he  tell  you  who  he  spoke  to? 

A.  No. 

Q.  Did  you  ask? 

A.  I  don't  —  I  don't  recall  whether  I  did  or  did  not.  It's 
possible  I  did  ask. 

Q.  So  then  when  you  deployed  he's  one  of  your  Soldiers  at  that 
point,  do  you  bring  it  up  at  all  that  I  don't  want  to  be  supervising 
this  guy? 

A.  No. 
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Q.  And  why  not? 

A.  At  that  point  I  was  told  to  leave  the  issue  and  to  drive  on 
and  complete  the  mission  'cause  that's  one  of  my  primary  tasks  as  a 
Soldier. 

Q.  So  you  just  put  that  out  of  your  mind? 

A.  Yes,  actually. 

Q.  Now,  you  know  what  a  derog  is? 

A.  Correct. 

Q.  And  a  derog  is  derogatory  information  that  can  be  filed 
against  somebody  that  has  a  clearance? 

A.  Correct. 

Q.  And  you  knew  what  a  derog  was  at  the  time  of  the  alleged 
statements? 

A.  Yes. 

Q.  And  you  would  agree  with  me  that  a  derog  should  be  filed  if 
—  if  someone  with  a  clearance  makes  disloyal  to  America  statements? 

A.  I  would  assume  that  it  would.  I  honestly  don't  know  what 
regulation  states  the  perimeters  are,  but  I,  at  that  time,  would  have 
assumed  that,  yes. 

Q.  Yeah,  and  you  assume  that  because  somebody  who  has  no 
loyalty  to  the  country  really  shouldn't  have  a  clearance? 

A.  Correct. 

Q.  And  did  you  ever  report  this  to  the  company  commander  who 
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1  would  file  the  derog? 

2  A.  No. 

3  Q.  And  why  not? 

4  A.  Because  it  was  not  my  position  to  do  so. 

5  Q.  Did  you  ever  ask  somebody  to  report  this  so  that  a  derog 

6  could  be  filed? 

7  A.  At  that  time  I  wasn't  —  I  wasn't  quite  sure  whether  derogs 

8  needed  more  information.  And  when  I  was  instructed  that  the 

9  situation  was  going  to  be  handled,  I  kind  of  took  that  as  being 

10  truth. 

11  Q.  So  you,  at  that  time,  thought  about  derogs? 

12  A.  They  weren't  at  the  forefront  of  my  mind.  I  had  had 

13  minimal  kind  of  association  with  derogs.  So  at  that  —  at  that  time 

14  —  if  I  thought  about  derogs  I  thought  you  probably  needed  more  — 

15  more  paperwork  to  —  to  submit  a  derog  for  something  like  that. 

16  Q.  All  right.  So  —  so  right  now  on  the  stand  did  you  think 

17  about  derogs  or  not? 

18  A.  Not  that  I  remember. 

19  Q.  Okay.  And  you  think  if  you  did,  you  would  have  thought 

20  maybe  more  paperwork  - 

21  A.  Yes. 

22  Q.  -  would  be  needed? 

23  A.  Yes. 
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1  Q.  All  right.  Now  you  recall  being  questioned  by  CID  after 

2  PFC  Manning's  arrest,  correct? 

3  A.  Yes. 

4  Q.  And,  in  fact,  immediately  after  the  arrest,  CID  interviewed 

5  everyone  in  the  S-2  session? 

6  A.  I  don't  know  that  for  a  fact.  I  —  I  assume  so. 

7  Q.  Well,  you  know  that  CID  came  and  was  conducting  their 

8  investigation? 

9  A.  Correct. 

10  Q.  And  you  were  one  of  the  individuals  they  did  an  interview 

11  of  on  27  May  2010? 

12  A.  I  don't  remember  the  date,  sir.  But  they  did  interview  me, 

13  yes. 

14  Q.  And  at  that  point  when  they  interviewed  you,  they  —  they 

15  told  you  why  they  were  doing  it,  right? 

16  A.  They  indicated  —  I  believe  they  did,  yes. 

17  Q.  I  mean,  you  understood  that  PFC  Manning  was  being  arrested? 

18  A.  Actually,  at  that  time  I  knew  he  was  arrested,  but  they 

19  didn't  give  us  facts  on  what  he  was  actually  arrested  for. 

20  Q.  Well,  you  understood  the  general  allegation  —  the  general 

21  allegation  was  that  he  had  disclosed  classified  information? 

22  A.  What  I  understood  is  that  someone  disclosed  classified 

23  information  and  he  was  taken  as  a  possible  suspect. 
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5  to  try  to  get  as  many  facts  as  they  could? 

6  A.  Yes,  I  believe  so. 

7  Q.  And  you  were  one  of  the  people  that  they  interviewed? 
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A.  Correct. 

Q.  And  obviously  when  they  were  interviewing  you,  you  knew  it 
was  important  to  tell  them  everything  you  knew? 

A.  Yes. 

Q.  Anything  that  might  help  them  in  their  investigation? 

A.  Correct. 

Q.  And,  in  fact,  you  did  tell  them  several  things.  Do  you 
recall  telling  them  that  you  believe  he  was  a  closed  person? 

A.  A  closed  person? 

Q.  Correct. 

A.  It's  possible  that  I  used  that  terminology,  yes. 

Q.  All  right.  Do  you  recall  telling  them  that  PFC  Manning  did 

not  really  hang  out  with  other  people  in  the  unit? 

A.  To  my  knowledge,  yes,  that's  what  I  told  them. 

Q.  Do  you  recall  describing  PFC  Manning  as  a  pressure  cooker? 
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A.  I  don't  —  I  don't  recall  using  those  words  actually.  It's 
possible. 

Q.  All  right.  Do  you  recall  telling  them  that  PFC  Manning 
tried  to  stay  late  at  work? 

A.  Yes. 

Q.  And  do  you  recall  mentioning  that  he  would  discuss  politics 
and  global  politics? 

A.  Correct. 

Q.  Do  you  recall  telling  him  that  he  even  left  his  camera  once 
in  the  SCIF  —  SCIF  and  that  was  not  allowed? 

A.  Correct. 

Q.  All  right.  So  you  told  them  about  wanting  to  stay  late  and 
leaving  his  camera  in  the  SCIF  as  basically  instances  where  something 
wasn't  quite  right  with  what  PFC  Manning  was  doing,  right? 

A.  Correct.  It  was  abnormal  compared  to  the  rest  of  the 
Soldiers  in  our  unit. 

Q.  All  right.  And  on  that  date,  you  never  told  them  about 
disloyal  statements? 

A.  I  don't  —  I  don't  recall. 

Q.  You  don't  recall? 

A.  Whether  that's  true  or  not. 

Q.  All  right.  So  PFC  Manning's  arrested,  they're 
investigating  the  release  of  classified  information,  he's  the  prime 
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suspect;  you're  telling  them  about  staying  late,  being  a  pressure 
cooker,  not  hanging  out  with  anybody,  and  that  even  one  time  leaving 
a  camera  in  the  SCIF,  and  you  don't  recall  telling  them  about  anti- 
American  disloyal  statements? 

A.  I  —  I  recall  indicating  that  in  a  sworn  statement  taken  in 
Iraq.  I  don't  recall  the  individuals  —  because  I  was  interviewed  by 
two  separate  groups  of  individuals. 

Q.  Right? 

A.  And  I'm  not  quite  sure  which  ones  you're  referring  to. 

Q.  All  right.  Well,  I'm  referring  to  the  interview  that  you 

initially  did  on  27  May.  Now  you  - 

A.  So  that  would  have  been  - 

Q.  -  you  did  an  interview  again  in  June  - 

A.  Correct. 

Q.  -  and  that's  the  first  time  you  actually  put  it  in  a 

sworn  statement  in  June  about  this,  right? 

A.  I  —  no,  I  actually  believe  I  mentioned  it  in  —  in  the 
first  sworn  statement  with  the  individuals  that  came  to  Iraq  and 
visited  us  in  FOB  Hammer. 

Q.  All  right.  How  many  sworn  statements  do  you  recall  giving? 

A.  I  recall  giving  two. 

Q.  And  in  those  sworn  statements  —  do  you  recall  the  dates  of 
those? 
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A.  I  do  not  recall  the  dates  of  the  sworn  statements. 

CDC [MR.  COOMBS]:  All  right.  I'm  going  to  show  you  two  sworn 

statements.  I'm  going  to  get  these  marked  though,  first.  If  you 
could  just  mark  them  [speaking  to  the  court  reporter] . 

[The  court  reporter  marked  the  document  Defense  Exhibit  Romeo  Romeo.] 
CDC[MR.  COOMBS]:  I'm  showing  you  Defense  Exhibit  Romeo  Romeo 

for  identification  [handing  the  document  to  the  witness] .  Take  a 
look  at  that.  And  when  you're  done,  look  up  at  me. 

[The  witness  did  as  directed.] 

Q.  All  right.  So  are  these  your  two  sworn  statements? 

A.  Yes. 

Q.  And  these  are  the  only  sworn  statements  you've  given? 

A.  From  what  —  from  what  I  can  remember,  yes. 

Q.  All  right.  So  one  of  those  sworn  statements  is  June  18th  of 

2010? 

A.  Correct. 

Q.  Another  is  January  19th  of  2011? 

A.  Yes. 

Q.  All  right.  So  what  I'm  talking  about  is  27  May  2010;  the 
canvas  interview,  why  didn't  you  tell  them  on  that  day  about  these 
alleged  statements  if  they  really  happened? 

A.  I  believe  at  that  time  they  were  asking  me  very  direct 

questions  and  I  was  answering  questions.  And  from  what  I  can 
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remember  they  weren't  —  they  didn't  open  the  floor  to  any  —  any 
add-ons  that  I  felt  was  necessary.  I  don't  quite  remember  that  — 
that  actually  personal  questioning. 

Q.  What  was  the  direct  question  that  got  to  he  left  a  computer 
—  or  a  camera  in  the  SCIF? 

A.  They  probably  —  I  don't  remember  the  questions  verbatim  — 

Q.  Right. 

A.  -  but  they  probably  asked  me  if  he  did  anything  that 

would  have  violated  any  security  requirements  or  regulations  in  the 
actually  SCIF. 

Q.  Okay.  So  when  they  asked  you  that  question,  it  doesn't  pop 
in  your  mind,  you  know  what,  right  before  the  deployment,  he  did  say 
he  had  no  loyalty  to  the  country  and  the  flag  meant  nothing  to  him? 

A.  I'm  sure  it  popped  into  my  mind. 

Q.  Not  enough  to  say  anything? 

A.  They  didn't  —  they  —  I  was  —  I  was  to  answer  specific 
questions . 

Q.  You  didn't  feel  you  should  volunteer  that? 

A.  I'm  sure  I  felt  I  should  have  volunteered  that. 

Q.  But  you  didn't? 

A.  I  guess  I  didn't  because  I  don't  see  that  in  front  of  me. 

Q.  Well,  I  don't  need  you  to  guess.  When  CID  pulled  you  aside 
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on  27  May  2010,  days  after  PFC  Manning  being  arrested,  you  see  the 
agents  going  around  confiscating  computers,  you  know,  interviewing 
everyone  in  the  S-2  section  to  include  yourself  - 

A.  Correct. 

Q.  -  and  you  know  PFC  Manning  has  been  arrested,  classified 

information's  been  leaked,  he's  the  prime  suspect,  you  don't  say  at 
that  point,  you  know  what,  I've  got  some  information  for  you  guys? 

A.  I  do  not  remember  anything  that  was  said  during  that 
interview. 

Q.  Nothing? 

A.  I  truthfully  do  not  remember. 

Q.  Sure  could  use  a  sworn  statement  then  of  when  this 
statement  happened  so  that  we  could  confirm  that  you're  not  just 
making  it  up  in  June,  right? 

A.  Correct. 

Q.  So  in  June  of  2010,  after  PFC  Manning  is  arrested,  after 
all  the  issues  come  out,  that's  the  first  you  time  you  write  down  in 
a  sworn  statement,  you  know  what,  he  said  he  had  no  loyalty  to  this 
country,  is  that  correct? 

A.  Correct.  Yeah. 

Q.  And  let's  look  at  that  statement  for  a  moment.  Let's  look 
—  where  do  you  write  that? 

A.  [Reviewing  the  document.] 
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Q.  I  can  help  you.  It's  in  the  middle  of  Page  Two. 

A.  Can  you  elaborate  on  that  question? 

Q.  Yeah,  where  do  you  write  the  facts  that  PFC  Manning  said 
anti-American  disloyal  comments  to  you? 

A.  Where  —  where  on  the  actual  statement  I  wrote  it? 

Q.  In  the  statement,  yes. 

A.  Yes.  I  wrote  that  following  —  indicating  that  Specialist 
Cooley  went  to  D.C.  to  visit  him.  And  then  I  indicated  that  I 
verbally  —  was  verbally  counseling  Manning. 

Q.  Where  is  that  at? 

A.  That's  halfway  down  page  Number  Two. 

Q.  All  right.  So  now  —  I  --  I  imagine  at  this  point  you 

understand  why  you're  being  interviewed  by  CID? 

A.  Yes. 

Q.  You  understand  at  this  point  —  this  whole  thing  is  flashed 
on  the  news  —  PFC  Manning  arrest,  the  leaks  that  are  happening, 
correct? 

A.  I  honestly  didn't  see  anything  on  the  news  at  that  point. 

Q.  Nothing? 

A.  I  had  very  limited  TV  access.  I  was  still  in  Iraq. 

Q.  And  so  —  well,  let's  just  go  with  what  you  knew  then. 

A.  Okay. 
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Q.  Did  you  know  at  that  point  that  he  was  arrested  for  leaking 
classified  information? 

A.  Correct.  Yes. 

Q.  Did  you  know  at  that  point  then  —  I  guess  you're 
suspicions  of  him  being  a  spy  and  perhaps  not  having  loyalty  to  the 
country,  maybe  that  was  true  then? 

A.  Yes. 

Q.  Yeah.  And  so  now  you  have  the  sworn  statement  of  yours, 
why  doesn't  it  start  off  with  this?  Why  doesn't  it  start  off  with, 
you  know  what,  I  was  right,  no  one  listened  to  me? 

A.  This  sworn  statement  was  following  a  three-hour 
questioning.  And  I  was  to  answer  questions  - 

Q.  Right? 

A.  -  and  then  write  in  my  own  handwriting  the  —  the  flow 

of  their  questioning. 

Q.  All  right.  Yeah  —  and  let's  look  —  I  mean,  this  is  in 
your  handwriting,  correct? 

A.  Yes. 

Q.  So  what  you're  trying  to  tell  me  is  then  they  told  you  to 
write  it  in  the  flow  of  their  questioning  as  opposed  to  what  you 
thought  was  most  important? 
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A.  From  my  knowledge  of  a  sworn  statement,  it  doesn't  —  it 
doesn't  line  up  in  what  is  most  important.  It's  the  flow  of  what 
actually  is  —  is  the  truth. 

Q.  Okay.  And  so  when  you're  writing  this  out,  you're  talking 
about  a  lot  of  stuff,  and  then  you  get  to  Page  Two  with  the  disloyal 
statements.  Wouldn't  you  agree  with  me  that  that  probably  is  the 
most  important  thing  in  this? 

ATC [CPT  OVERGAARD] :  Objection,  ma'am.  Asked  and  answered. 

MJ:  Overruled. 

A.  I  —  I  would  assume  that  —  that  possibly  it  is  very 
important . 

Q.  Okay.  And  —  and  wouldn't  it  if  —  if  it  were  the  truth 
and  important,  wouldn't  that  be  something  you  would  lead  off  with? 

A.  No,  because  that's  not  —  that's  not  how  our  actual 
questioning  session  took  place. 

Q.  Yeah,  but  this  —  you're  not  writing  this  as  they're  asking 
questions,  are  you? 

A.  I  answered  several  questions.  We  wrote  down  the  answers. 
And  I  was  to  further  elaborate  the  answers  on  a  sworn  statement. 

Q.  So  what  you're  saying  now  —  your  testimony  is  that  you 
wrote  this  an  --  this  out  based  upon  the  order  in  which  they  asked 
questions? 

A.  Yes. 
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Q. 

disloyal 

A. 

Q. 

A. 


about  an 
correct? 


And  so  CID  apparently  didn't  ask  you  a  question  about 
statements  until  about  halfway  through  the  Page  Two? 

I  guess  so,  yes. 

So  that's  when  they  decided  to  cover  that  important  fact? 
I  would  believe  so,  yeah. 

Okay.  All  right.  Let's  —  let's  go  ahead  and  now  talk 
EEO  complaint.  Now  you  and  PFC  Manning  aren't  friends. 


Q.  You  don't  like  him? 

A.  I  didn't  have  opinion  —  an  opinion  towards  him  personally 
one  way  or  the  other. 

Q.  All  right,  so  he  wasn't  important  enough  for  you  to  decide 
if  you  liked  him  or  not? 

A.  He  was  very  important  to  me,  but  it  wasn't  a  social 
environment.  It  was  strictly  professional. 

Q.  Okay,  so  you  had  no  opinion  on  liking  him  or  disliking  him 


Q.  -  is  that  your  testimony? 

[No  response.] 

Q.  And  that  was  a,  no,  right? 

A.  That  is  a  no. 
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Q.  Okay.  And  you  never  got  along  with  him,  correct? 

A.  I  —  I  —  I  can't  agree  with  that. 

Q.  You  think  you  got  along  with  him? 

A.  Yes. 

Q.  All  right.  It's  true  that  he  filed  an  EEO  complaint 
against  you  during  the  deployment? 

A.  I  believe  so,  yeah. 

Q.  You  know  so? 

A.  I  don't  know  for  a  fact  it  was  him. 

Q.  Well,  you  knew  that  he  filed  an  EEO  complaint  against  you  - 
-  is  that  —  you're  saying  that  you  don't  know  that? 

A.  I  did  not  know  —  no  one  factually  told  me  that  he  was  the 
person  that  filed  against  me. 

Q.  Let's  look  at  the  19  January  2011  sworn  statement,  okay? 

A.  Yes. 

Q.  That's  the  typed  on.  And  let's  turn  to  Page  Two. 

[The  witness  did  as  directed.] 

A.  Okay. 

Q.  Actually,  before  we  get  to  Page  Two  —  because  I'll  cover 
that  in  a  moment.  Let's  go  to  your  first  statement  —  the 
handwritten  one. 

A.  Yes. 

Q.  And  we'll  turn  to  Page  4  of  5. 
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1  [The  witness  did  as  directed.] 

2  Q.  Okay,  and  I'm  going  to  read  this,  but  I  want  you  to  follow 

3  along  as  I  read  this  and  then  you  tell  me  if  I  read  this  correctly? 

4  A.  Okay. 

5  Q.  [Reading  from  the  document]  Manning  made  a  complaint  to  EEO 

6  about  Captain  Martin,  CW2  Ehresman  and  myself.  Did  I  read  that 

7  correctly? 


8 

A. 

You  did  read  that  correctly. 

9 

Q. 

All  right,  so  you  knew  he  made  a  complaint  against  you. 

10 

correct? 

11 

A. 

I  assumed  he  did.  No  one  told  me  for  a  fact. 

12 

Q. 

Well,  you  didn't  qualify  it  in  this  did  you? 

13 

A. 

No  I  didn't. 

14 

Q. 

So  at  least  in  this  sworn  statement  you  said  - 

15 

A. 

Yes . 

16 

Q. 

-  he  made  the  complaint  against  you? 

17 

A. 

Yes.  Yeah. 

18 

Q. 

And  his  complaint  against  you  was  for  using  derogatory 

19 

derogatory  terms  such  as  "faggoty"  - 

20 

A. 

Yes. 

21 

Q. 

-  is  that  correct? 

22 

A. 

Yes. 

23 

Q. 

And  you,  in  fact,  admitted  to  using  the  word  "faggoty"? 
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A.  Correct. 

Q.  But  you  say  that  you  used  that  term  in  reference  to  not 
being  able  to  do  so  many  pushups  as  opposed  to  in  reference  to  being 
gay? 

A.  Correct. 

Q.  So  you  believe  PFC  Manning  misinterpreted  your  use  of 
faggoty  as  derogatory? 

A.  Yes. 

Q.  Now  PFC  Manning  could  have  misinterpreted  something  you 
said.  Can  you  see  how  it's  possible  that  you  could  have 
misinterpreted  something  that  PFC  Manning  said? 

A.  As  a  general  statement,  yes. 

Q.  Is  it  possible  that  you  misinterpreted  his  statements  about 
having  duty  to  all  people  and  not  having  blind  allegiance  to  a  flag? 

A.  I  do  not  believe  I  misinterpreted  that  at  all. 

Q.  Not  possible? 

A.  No. 

Q.  Not  in  your  mind,  huh? 

A.  No. 

Q.  All  right.  Now  PFC  Manning  also  complained  about  your  use 
of  several  offensive  references  within  the  targeting  office  rules 
that  you  posted,  correct? 
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A.  I  don't  recall.  I'm  not  quite  sure  what  you're  speaking 
of,  sir. 

Q.  All  right.  I  can  refresh  your  memory. 

CDC[MR.  COOMBS]:  I'm  showing  you  what's  been  marked  as 

Defense  Exhibit  Sierra  Sierra  for  identification  [handing  the 
document  to  the  witness] . 

Q.  Do  you  recognize  that? 

[The  witness  read  the  document.] 

A.  I  do  recognize  this,  yes. 

Q.  That's  the  targeting  office  rules  that  you  posted? 

A.  It  was  up  at  my  computer,  yes. 

Q.  Not  my  question.  That's  the  targeting  office  rules  that 
you  posted? 

A.  I  don't  know  how  to  answer  that  question  because  I'm  not 
the  one  that  actually  created  this  document.  But,  yes,  I  placed  it 
above  my  computer  monitor,  yes. 

Q.  Okay.  Are  you  saying  Chief  Hack  created  this  document? 

A.  I  believe  —  from  what  I  remember,  yes. 

Q.  So  you're  denying  creating  this  document? 

A.  I  --  I  —  I  am  --  I  probably  helped  with  some  of  the  lines, 
but  it  was  overall  his  —  his  document. 
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1  Q.  All  right.  So  let's  go  through  some  of  these  lines.  The 

2  first  one  is  --  you  said,  you  must  knock  on  the  door  prior  to 

3  entering,  is  that  correct? 

4  A.  Correct. 

5  Q.  Then  the  second  one  says,  if  you  have  nothing  smart  to  say, 

6  then  it  better  not  come  out  of  your  mouth,  correct? 

7  A.  Correct. 

8  Q.  Then  you  say  this  office  belongs  to  CW2  Hack  and  Specialist 

9  Showman,  so  keep  your  grubby  hands  out. 

10  A.  That's  what  it  says. 

11  Q.  Then  the  fourth  says  unless  your  chest  carries  some  heavy 

12  rank,  don't  even  bother  knocking. 

13  A.  That  is  what  it  says. 

14  Q.  Then  the  fifth  says  the  individuals,  that  own  this  office 

15  are  in  the  business  for  catching  shitbags .  So  if  you  think  for  one 

16  second  you  can  come  in  here  and  bug  us  with  sissy  shit,  then  you 

17  might  want  to  rethink  your  path  in  life. 

18  A.  That  is  what  it  says. 

19  Q.  Then  you  say  targeting  will  not  play  games  in  your  lane,  so 

20  if  it's  —  and  then  you  use  what  looks  to  be  something  that  stands 

21  for  "fucking' ,  is  that  correct? 

22  A.  Yes,  that's  what  it  looks  like. 

23 
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Q.  So  if  it  is  f'n  games  that  you  want  to  play,  then  by  all 
means  drag  my  ass  in  with  you,  but  beware,  you  will  lose. 

A.  I  see  that  here,  yeah. 

Q.  Then  the  seventh  rule  is  if  any  of  these  rules  confuse  you, 
then  maybe  you  should  turn  your  sorry  ass  around  because  you  have  no 
business  being  in  my  office? 

A.  I  see  that. 

Q.  And  then  lastly,  go  away. 

A.  See  that  as  well. 

Q.  These  are  the  rules  that  you  had  posted  above  your 
computer? 

A.  I  know  that  we  had  targeting  rules.  I  actually  do  not 
remember  some  of  these  rules.  But,  yes,  this  was  100  percent  a  joke. 
There  was  no  - 

Q.  100  percent  a  joke? 

A.  There  was  no  door.  There  was  no  actual  office.  There  were 
two  computers  sitting  next  to  each  other. 

Q.  Okay,  so  you're  saying  that  this  is  a  joke? 

A.  Yes. 

Q.  And  that's  why  you  posted  it? 

A.  That  —  to  my  —  to  my  understanding.  Chief  Hack  and  I 
laughed  about  it  a  couple  of  times.  And  so  did  several  other 
Soldiers  in  the  shop. 
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Q.  So  Chief  Hack  would  support  your  opinion  that  this  was  a 

joke? 

A.  I  believe  he  would,  yes. 

Q.  Why  do  you  believe  that? 

A.  Mainly  because  there  definitely  was  not  an  office.  There 
might  be  a  couple  of  lines  that  he  would  consider  something  that  he 
was  serious  about,  but  the  overall,  I  guess,  intention  of  this  was,  I 
guess  to  lighten  —  lighten  the  situation  because  there  was 
definitely  not  an  office  for  people  to  actually  come  to. 

Q.  Okay,  so  I'm  missing  the  joke.  Can  you  explain  to  me  what 
the  joke  was  supposed  to  be? 

A.  The  joke  was  that  we  were  being  really  serious  about  having 
an  actual  targeting  office,  and  we  were  making  office  rules  that 
didn't  necessarily  make  sense  for  the  mission. 

Q.  And  why  was  that  funny? 

A.  It's  funny  to  —  to  most  Soldiers.  It  was  funny  in  the 
shop  at  the  time. 

CDC [MR .  COOMBS]:  Okay.  Retrieving  Defense  Exhibit  Sierra 

Sierra  for  identification  [retrieving  the  document  from  the  witness] 
and  offering  into  evidence  as  Defense  Exhibit  Sierra  Sierra  [handing 
the  document  to  the  Military  Judge] . 

MJ:  Any  objection? 

ATC [CPT  OVERGAARD] :  No,  ma'am. 
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1  MJ: 

Defense  Exhibit  Sierra  Sierra's  admitted. 

2  Q. 

Now  at  one  point  during  the  deployment  PFC  Manning  punched 

3  you? 


4  A. 

Yes. 

5  Q. 

He  hit  you  in  the  face? 

6  A. 

Yes . 

7  Q. 

And  you  didn't  like  getting  hit  in  the  face? 

8  A. 

No. 

9  Q. 

Do  you  recall  saying  I  can't  believe  he  messed  with  me? 

10  A. 

I  believe,  I  recall  making  a  —  making  a  statement  like 

11  that,  yes 


12  Q. 

And  you  recall  saying  I  was  the  last  person  he  probably 

13  should  have  messed  with? 


14  A. 

I  don't  recall  saying  that  in  those  words. 

15  Q. 

All  right,  let  me  get  the  words  right. 

16  A. 

Okay. 

17  Q. 

I  was  the  last  person  he  probably  should  have  punched? 

18  A. 

The  first  part  of  that  statement  I  believe  is  a  little  off 

19  —  from  my  —  from  my  memory. 

20  Q.  Okay,  do  you  recall  giving  a  statement  to  the  documentary 

21  "We  Steal  Secrets"? 


22  A. 

Yes. 

23  Q. 

And  --  and  you  gave  a  statement  in  that  film,  correct? 
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1  A.  Yes. 

2  Q.  Now  in  that  film  did  you  say  I  was  the  last  person  he 

3  probably  should  have  punched? 

4  A.  I  honestly  haven't  seen  the  documentary.  But  that's  not  — 

5  that's  not  —  I  worded  something  like  that,  but  I  don't  recall  it 

6  being  worded  exactly  like  that. 

7  CDC [MR .  COOMBS]:  Okay.  Well,  I'll  refresh  your  memory. 

8  MJ:  Mr.  Coombs,  has  this  exhibit  been  marked  in  some  fashion? 

9  CDC [MR .  COOMBS]:  It's  not  an  exhibit,  ma'am.  It's  a  video. 

10  MJ:  So. 

11  CDC [MR.  COOMBS]:  A  video  of  her  previous  statement. 

12  MJ:  Well,  it's  going  to  be  in  some  fashion  identified  for  the 

13  record. 

14  CDC [MR.  COOMBS]:  I'll  reduce  it  to  - 

15  ATC [CPT  OVERGAARD] :  Ma'am,  we  haven't  seen  this  video  before. 

16  CDC [MR.  COOMBS]:  It's  their  witness. 

17  MJ:  That's  doesn't  —  do  you  want  a  recess? 

18  ATC [CPT  OVERGAARD]:  We  would  like  to  see  the  video,  yes,  ma'am. 

19  MJ:  All  right.  How  long  —  how  long  is  the  video? 

20  CDC [MR.  COOMBS]:  Not  long,  ma'am. 

21  MJ:  All  right.  Twenty  minutes  acceptable? 

22  ATC [CPT  OVERGAARD]:  Depends  how  long  the  video  is,  I  guess, 

23  ma'am. 
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1  MJ:  Well,  why  don't  we  start  off  with  20  minutes,  and  then  if 

2  you  need  more  time,  you  can  let  me  know. 

3  ATC [CPT  OVERGAARD] :  Yes,  ma'am. 

4  MJ:  All  right.  Go  ahead  and  show  the  government  the  video. 

5  Ms.  Showman,  please  don't  discuss  your  testimony  or  knowledge  of  the 

6  case  with  anyone  during  the  recess 

7  WIT:  Yes,  Your  Honor. 

8  MJ:  Anything  we  need  to  address  before  we  recess  the  Court? 

9  CDC [MR.  COOMBS]:  No,  Your  Honor. 

10  TC [MAJ  FEIN]:  No,  ma'am. 

11  MJ:  Court  is  in  recess. 

12  [The  court-martial  recessed  at  1043,  19  July  2013.] 

13  [The  court-martial  was  called  to  order  at  1117,  19  July  2013.] 

14  MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 

15  parties  present  when  the  Court  last  recessed  are  again  present  in 

16  court.  The  witness  is  on  the  witness  stand.  Government,  have  you 

17  had  the  opportunity  to  do  what  you  asked  me  to  do? 

18  ATC [CPT  OVERGAARD]:  Yes,  ma'am.  We  reviewed  two  clips  from  the 

19  video. 

20  MJ:  All  right,  Mr.  Coombs,  are  you  ready  to  proceed? 

21  Q.  Ms.  Showman,  you  indicated  that  you  could  not  recall,  so  I 

22  want  to  go  ahead  and  play  a  clip  for  you  and  have  you  watch  it. 

23  [The  Civilian  Defense  Counsel  played  a  video  on  the  video  screen 
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in  full  view  of  all  court-martial  participants.] 

Q.  So  you  see  there  you  say,  I  was  the  last  person  he  probably 
should  have  punched? 

A.  Yes,  I  saw  that. 

Q.  Okay,  so  does  that  refresh  your  memory? 

A.  It  -  it  does. 

CDC [MR .  COOMBS]:  Retrieving  from  the  witness  Defense  Exhibit 

Quebec  Quebec  for  identification  [retrieving  the  document  from  the 
witness] .  Offering  into  evidence  Defense  Exhibit  Quebec  Quebec  for 
identification  as  Defense  Exhibit  Quebec  Quebec  [handing  the  document 
to  the  Military  Judge] . 

ATC [CPT  OVERGAARD] :  Is  that  the  —  is  that  the  couns  - 

MJ:  Any  objection?  That's  the  counseling. 

ATC [CPT  OVERGAARD]:  No  objection.  Your  Honor. 

MJ:  Defense  Exhibit  Quebec  Quebec's  admitted. 

Q.  Now,  the  clip  we  just  saw  that  was  from  the  movie  "We  Steal 
Secrets"? 

A.  Yes. 

Q.  And  this  is  a  documentary  that  was  released  nationwide  in 
May  of  this  year? 

A.  I  don't  know  when  it  was  released,  sir. 

Q.  Do  you  know  that  it  was  released  this  year? 

A.  Yes. 
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Q.  And  you  gave  an  interview  for  that  documentary  obviously? 

A.  Yes. 

Q.  You  actually  appear  in  the  movie? 

A.  From  what  my  parents  have  indicated,  yes,  I  have  appeared. 

Q.  Okay,  and  they  flew  you  to  New  York  for  the  interview,  is 

that  correct? 

A.  Yes. 

Q.  Your  flight,  your  hotel,  and  travel  expenses  were  paid? 

A.  Yes. 

Q.  And  you  gave  this  interview  after  your  testimony  in  the 
Article  32  testimony  —  excuse  me,  after  your  testimony  in  the 
Article  32  hearing? 

A.  Correct. 

Q.  And  you  knew  at  the  time  that  you  gave  this  interview  that 
you  were  going  to  be  a  witness  in  this  trial? 

A.  It  —  it  was  I  didn't  know  for  sure  if  I  was  going  to  be  a 
witness  in  this  trial.  I  honestly  didn't  know  what  the  kind  of  — 
what  was  going  to  happen  after  the  Article  32  hearing. 

Q.  The  government  didn't  inform  you  that  you're  going  to  be 
one  of  their  witnesses? 

A.  They  said  there  was  —  there  was  a  chance,  but  I  didn't 
know  what  —  what  actual  court  appearances  would  be  needed.  I  didn't 
know  the  process  of  what  needed  to  have  happen. 
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Q.  All  right.  So  at  the  time  you  did  this  interview  you're 
telling  us  that  you  didn't  believe  you'd  be  testifying  in  a  court- 
martial? 

A.  I  knew  there  was  a  chance  that  I  would  be  testifying. 

Q.  And  you  did  this  interview  actually  to  make  PFC  Manning 

look  bad? 


A.  No. 

Q.  You  didn't  do  this  interview  - 

A.  Did  not. 

Q.  -  to  make  him  look  bad? 

A.  No. 

Q.  You  said  negative  comments  about  him,  correct? 

A.  I  told  truths  about  situations  that  took  place. 

Q.  My  question  was  you  made  negative  comments  about  him, 
correct? 

A.  I  didn't  believe  they  were  negative,  so  I  can't  say  that 
that  is  correct. 

Q.  You  didn't  believe  any  of  your  comments  were  negative? 

A.  I  —  I  —  no. 

Q.  Not  at  all? 


Q.  Okay.  Do  you  recall  —  well,  actually  we'll  table  that  for 
one  moment  - 
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A.  Okay. 

Q.  -  I'll  come  back  to  that  and  you  tell  me  if  you  think 

that  it  was  negative.  You  have  a  Twitter  account,  correct? 

A.  Yes. 

Q.  And  actually  a  —  more  accurately  used  to  have  a  Twitter 
account? 

A.  Correct. 

Q.  And  on  September  12th  of  2012,  you  sent  out  a  Tweet 
regarding  PFC  Manning  and  his  supporters,  correct? 

A.  Yes. 

Q.  And  in  that  Tweet  you  stated,  ignorant  people  break  the 
rules  and  say  it's  honorable.  Ignorant  thoughtless  followers  support 
Manning  without  even  knowing  the  truth? 

A.  Yes,  I  said  that. 

Q.  That's  what  you  said? 

A.  Yes. 

Q.  So  you  don't  support  PFC  Manning  obviously? 

A.  I  don't  support  what  was  allegedly  —  what  allegedly  took 
place. 

Q.  And  I  guess  you  would  say  that  anyone  who  would,  would  be 
ignorant? 

A.  No  one  understood  the  true  facts  at  that  point  to  my  —  to 
my  beliefs. 
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Q.  Okay.  And  I  guess  when  you  say  ignorant  people  break  the 
rules,  that's  --  you're  referring  to  PFC  Manning? 

A.  I  was  referring  to  anyone  in  general  that  would  break  the 
rules  and  be  called  a  hero,  yes. 

Q.  And  so  in  this  instance  you're  referring  to  PFC  Manning? 

A.  Yes. 

Q.  Okay,  now  going  back  to  what  you  said  —  you  didn't  think 
you  said  anything  negative  in  there  --  in  the  "We  Steal  Secrets",  in 
your  opinion  you  stated  —  this  was  your  opinion,  that  his  actions 
showed  that  he  had  no  allegiance  to  this  country? 

A.  Can  you  identify  when  you're  referring  - 

Q.  In  the  - 

A.  -  to  that  statement? 

Q.  -  with  regards  to  the  —  to  the  "We  Steal  Secrets"  - 

A.  Okay. 

Q.  -  you  told  them,  in  your  opinion,  his  actions  showed 

that  he  had  no  allegiance  to  this  country? 

A.  I  do  not  remember  saying  that. 

Q.  You  don't  remember  saying  that? 

A.  No. 

Q.  Do  you  remember  saying,  in  your  opinion,  his  actions  showed 
that  he  had  no  desire  for  our  country's  well-being? 

A.  I  don't  recall  that  statement  either. 
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Q.  Do  you  recall  saying  you  believe  that  he  had  a  desire  to  do 
damage  to  our  country? 

A.  I  don't  recall  that. 

CDC [MR.  COOMBS]:  Can  I  have  the  next  CD  marked? 

[The  court  reporter  marked  the  CD  Defense  Exhibit  Uniform 
Uniform  for  identification.] 

MJ:  Yes  [speaking  to  Captain  Overgaard] ? 

ATC [CPT  OVERGAARD]:  The  government  objects  to  the  use  of  this 
because  she  doesn't  actually  say  that  in  the  —  in  the  clip. 

CDC [MR.  COOMBS]:  Well,  we'll  find  out  in  a  moment. 

MJ:  I'll  —  overruled.  Let's  see  what  the  clip  says. 

CDC [MR.  COOMBS]:  I'm  going  to  play  what's  been  marked  as 

Defense  Exhibit  Uniform  Uniform  for  identification. 

[The  civilian  defense  counsel  played  the  audio  CD,  Defense  Exhibit 
Uniform  Uniform  for  identification  in  open  court  where  all  court- 
martial  participants  could  hear.] 

Q.  That's  your  voice,  isn't  it? 

A.  Yes. 

Q.  So  I'll  ask  you  these  questions  again.  Does  it  refresh 
your  memory  now  that  you  said  in  your  opinion  his  actions  showed  that 
he  had  no  allegiance  to  this  country? 

A.  That  is  what  —  that  is  what  I  said.  I  don't  recall  that 
that  question  was  actually  identified  as  Manning,  in  particular.  It 
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was  actually  a  broad  —  it  was  actually  a  broad  question,  and  they  do 
not  show  that  obviously. 

Q.  Are  you  saying  that  in  my  opinion  his  actions  showed  — 
this  is  what  you  say,  I  quote  you  "In  my  opinion,  his  actions  showed 
that  he  had  no  allegiance  to  his  country."? 

ATC [CPT  OVERGAARD] :  Objection,  that's  a  mischaracterization . 

She  said  "somebody",  not  "his  actions". 

CDC [MR.  COOMBS]:  Well,  we  can  play  it  again. 

MJ:  Well,  go  ahead. 

[The  civilian  defense  counsel  played  the  audio  CD,  Defense  Exhibit 
Uniform  Uniform  for  identification  in  open  court  where  all  court- 
martial  participants  could  hear.] 

Q.  All  right,  so  you're  saying  now  on  the  stand  that  you  are 
not  referring  to  PFC  Manning  when  you  say  that? 

A.  The  gen  —  the  questipn  that  I  was  asked  —  I  don't 
remember  verbatim  --  was  they  asked  me  to  give  them  an  example  of 
what  —  in  —  under  what  —  these  circumstances  of  this  case,  because 
at  that  time  Manning  was  just  allegedly  —  asking  me  what  my  opinion 
as  far  as  this  topic,  what  would  be  considering  a  whistleblower.  I 
was  not  identifying  Manning  in  that  statement. 

Q.  All  right.  So  my  question  —  and  then  you  can  just  answer 
it  —  when  you're  saying  actions  show  that  he  has  no  allegiance  to 
this  country,  actions  show  has  no  desire  for  our  country's  well- 
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being,  has  a  desire  to  do  damage  to  our  country,  you're  saying  right 
now  on  the  stand,  that  when  you  said  that,  you're  not  referring  to 
PFC  Manning? 

A.  I'm  referring  to  anyone  that  would  do  something  like  that, 

yes . 

Q.  Okay. 

A.  I  did  not  know  whether  PFC  Manning  had  done  anything  like 
that  at  that  time. 

Q.  All  right.  So  are  you  referring  to  PFC  Manning  or  not? 

A.  No. 

Q.  That's  what  you  want  us  to  believe? 

A.  Yes. 

CDC [MR.  COOMBS]:  No  further  questions. 

MJ:  Redirect? 

CDC [MR.  COOMBS]:  Retrieving  from  the  witness  Defense  Romeo  Romeo 
for  identification  [retrieving  the  document  from  the  witness  and 
handing  it  to  the  court  reporter] . 

ATC [CPT  OVERGAARD] :  May  I  have  a  moment? 

MJ:  Yes. 

[Pause] 

[END  OF  PAGE] 
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REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  I'm  just  going  to  go  over  a  couple  of  things  that  defense 
brought  up  just  to  let  you  clarify  anything.  So  was  there  —  there 
was  an  EEO  complaint  while  you  were  deployed? 

A.  Yes. 

Q.  And  it  was  because  you  had  said  that  you  had  said  something 
was  fagotty? 

A.  Yes. 

Q.  Was  there  other  EEO  complaints  while  you  were  deployed? 

A.  Yes. 

Q.  Was  there  any  consequences  to  that  particular  EEO 
complaint? 

A.  No. 

Q.  So  what  happened? 

A.  I  was  pulled  into  the  EO  office,  and  the  EO  officer 
informed  me  of  the  allegations  brought  against  me.  And  I  explained 
the  situation  to  him.  What  —  what  I  actually  —  what  had  happened 
when  I  actually  said  it.  I  admitted  to  saying  it.  And  he  informed 
me  that  I  would  need  to,  you  know,  be  careful  of  what  I  say  because 
it  could  offend  other  people.  And  that  if  something  was  brought  to 
his  attention  again  then  he  would  have  to  pull  me  back  into  the 
office . 
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Q.  Did  you  ever  hear  PFC  Manning  use  the  word  fagotty? 

A.  Yes. 

Q.  And  when  was  that? 

A.  That  was  following  the  EO  complaint. 

Q.  Were  there  —  were  there  other  gay  Soldiers  in  your  unit? 

A.  Yes. 

Q.  And  did  you  have  any  issues  with  them? 

A.  No. 

Q.  Did  you  have  any  other  gay  Soldier  friends  in  the  unit? 

A.  Yes. 

Q.  And  is  that  —  was  that  any  —  was  your  perceived  sexual  — 
was  your  perceived  perception  —  or  was  your  perception  of  PFC 
Manning's  sexual  orientation  —  was  that  —  that  have  anything  to  do 
with  why  you  had  counseled  him? 

A.  No. 

Q.  In  fact,  was  there  a  time  that  you  —  you  had  learned 
information  about  his  sexual  orientation? 

A.  Yes. 

Q.  And  when  was  that? 

A.  That  was  —  I  believe  it  was  around  the  May  of  2009 
timeframe.  He  had  gone  to  analyst  training  in  Washington,  D.C. 

Q.  Okay,  and  what  —  what  did  you  learn? 

A.  I  learned  - 
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CDC [MR.  COOMBS]:  Objection,  Your  Honor.  Relevance.  At  this 

point  of  —  of  information  about  my  client's  sexual  orientation. 

MJ:  Where  are  you  going  with  this? 

ATC [OPT  OVERGAARD] :  Ma'am,  they  —  they  brought  it  up  to  show 
bias.  So  I'm  —  I'm  —  I'm  laying  this  foundation  so  she  can  show 
what  she  did  that  —  that  indicates  that  she  didn't  have  bias. 

CDC [MR.  COOMBS]:  I  brought  it  —  I  brought  up  the  EO 

complaint  to  show  bias,  not  sexual  --  not  for  prejudice  —  if  she  has 
any  towards  gay  individuals. 

MJ:  Well,  the  word  was  "fagotty."  I'm  going  to  overrule  it  and 

allow  it. 

Questions  continued  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

A.  Can  you  repeat  your  question,  ma'am? 

Q.  Sure.  What  did  you  —  when  did  you  learn  or  when  did  you 
receive  some  information  about  PFC  Manning's  sexual  orientation? 

A.  He  --  he  was  away  on  TDY  and  I  received  a  phone  call  from  - 
-  from  PFC  Manning  indicating  that  an  NCO  had  accused  him  of  some 
homosexual  acts  outside  of  a  hotel  that  the  —  the  individuals 
attending  TDY  were  staying  at. 

Q.  Without  going  into  details,  what  happened  as  a  —  as  a 
response  to  —  to  that  information? 
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A.  My  response  was  to  —  I  got  —  my  first  —  my  first  thing 
was  to  get  everything  that  —  that  Manning  wanted  to  tell  me  about 
the  situation. 

Q.  Okay. 

A.  And  I  informed  him  that  no  matter  what  the  outcome,  when  he 
came  back,  we  would  try  to  assist  him  in  the  issue,  and  that  we 
obviously  weren't  going  to  take  the  NCO's  word  on  the  —  on  the 
situation.  And  I  did  remind  him  that  regardless  of  —  regardless  of 
who  he  is,  what  he  does,  or  what  he  likes  to  do  in  his  personal  time, 
that  he  should  be  just  a  little  —  a  little  bit  more  cautious  on 


where  he  does 

things  due  to  the  fact  we  do  have  a  "don't  ask,  don't 

tell",  I  just 

asked  him  not  to  tell  us,  but  otherwise  we  would  handle 

the  situation 

when  he  got  back. 

Q.  You 

say  you  assisted.  How  did  you  assist  him? 

A.  I  partnered  up  with  Sergeant  Adkins  and  we  —  we  kind  of 


got  the  NCO's 

side  of  the  story  and  told  him  that  there  were  no 

grounds  for  -- 

-  for  his  accusation,  and  we  weren't  going  to  —  we 

weren't  going 

to  entertain  it. 

Q.  Did 

anyone  recommend  separation? 

A.  That  NCO  did. 

Q.  And  then  how  did  you  respond? 
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A.  I  responded  to  the  fact  that  he  —  we  pretty  much  told  him 
that  we  weren't  going  to  pursue  separation  at  all  for  —  for  that  — 
for  that  issue. 

Q.  And  then  just  —  just  to  explain,  in  that  video  —  well, 
can  you  tell  us  about  —  what  did  you  talk  about  in  --  in  the 
interview  that  you  did  for  that  video  that  Mr.  Coombs  showed? 

A.  We  talked  about  a  lot  of  things.  We  talked  about  kind  of 
personal  things  about  myself.  Where  I  come  from.  My  --  my 
experience  within  the  unit.  Different  aspects  on  unit  function  and 
things  like  that.  He  asked  me  some  questions  about,  you  know,  if  I  - 
-  I  ever  had,  you  know,  personal  conversations  with  Manning  and 
things  like  that,  and  just  my  opinion  on  different  controversial 
topics  like  whistleblowing  or  situations  like  Abu  Ghraib  and  things 
like  that.  It  was  a  very  broad  spectrum,  two-hour  questioning. 

Q.  And  did  you  —  did  you  discuss  this  —  the  no  allegiance 
statement  that  you  testified  about  - 

A.  No  I  did  not. 

Q.  -  today?  And  did  you  discuss  —  well,  did  you  discuss 

any  other  details  related  to  the  case  or  did  you  --  what  type  of 
information  did  you  talk  about  related  to  the  case? 

A.  The  we  talked  —  we  did  —  I  did  talk  about  when  he  struck 
me.  But  the  majority  —  the  majority  of  the  questions  were  kind  of 
my  personal  opinion  of  situations.  I  was  very,  very  careful  to  shut 
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down  any  possible  questions  that  could  have  pertained  to  the  case 
especially  when  the  case  was  in  closed  session.  And  they  knew  not  to 
touch  anything  that  wasn't  public  record.  But  primarily  it  was 
really  my  personal  views  on  --  on  different  situations  and  kind  of, 
you  know,  how  --  what  I  thought  of  Manning  just  as  a  Soldier  and 
things  like  that. 

Q.  Now  Mr.  Coombs  talked  to  you  about  some  of  —  he  brought 
out  from  you  that  —  that  PFC  Manning  had  a  lot  of  —  he  was 
interested  in  politics  and  things  like  that? 

A.  Yes. 

Q.  What  are  some  of  his  political  views  that  you  talked  about? 

A.  Politically  - 

CDC [MR .  COOMBS]:  Objection,  Your  Honor. 

MJ:  What  is  the  relevance  of  that? 

ATC [CPT  OVERGAARD] :  Well,  actually  —  I'll  withdraw  the 
question,  ma'am. 

Q.  In  regard  to  —  was  there  any  other  information  that  you 
considered  when  you  stated  that  —  that  you  thought  PFC  Manning  was  a 
possible  spy,  besides  what  Mr.  Coombs  elicited  from  you? 

A.  Was  there  any  other  information  that  would  elicit? 

Q.  That  —  was  there  any  other  information  that  you  —  that 
went  into  your  —  you  said  it  was  kind  of  a  gut  feeling,  a  personal  - 
-  I  guess  a  personal  opinion  that  went  into  that  decision? 
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A.  There  —  there  was  some  —  some  things  that  he  definitely  - 
-  definitely  did  around  —  around  the  office  that  definitely  walked 
the  line  of  personal  security  issues,  if  not  crossed  them.  So  it 
just  kind  of  further  solidified  - 

MJ:  Yes  [speaking  to  the  defense]? 

CDC [MR .  COOMBS]:  Your  Honor,  I'd  like  to  have  this  as  a 

timeframe.  Is  the  witness  representing  that  this  occurred  prior  to 
when  she  said  he  was  a  spy?  If  so,  then,  you  know,  it  would  be  a 

fact  that  she  didn't  testify  on  direct,  but  I  want  to  make  sure  that 

this  is  stuff  prior  to  the  time  that  she  made  the  allegation. 

MJ:  Captain  Overgaard,  why  don't  you  go  ahead  and  capture  that. 

ATC [CPT  OVERGAARD]:  Yes. 

Q.  Please  —  please  limit  your  response  to  any  information 
that  you  had  before  you  actually  made  the  statement  to  Master 
Sergeant  Adkins  that  you  thought  he  was  a  possible  spy.  So  anything 
you  actually  considered  when  you  made  that  statement  to  Master 
Sergeant  Adkins. 

A.  It  was  really  just  the  —  at  that  point  just  his  emotional 
responses  and  the  things  that  —  that  I  had  already  testified  about 
that  really  just  did  not  sit  well  —  sit  well  with  me  as  someone 
that,  you  know,  could  definitely  be  holding  a  security  clearance.  So 
I  don't  —  I  don't  —  I'm  not  comfortable  enough  with  my  timeline 
memory  to  be  able  to  give  you  specific  circumstances,  but  I  --  I  do 
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know  that  I  was  very  confident  in  my  feelings  on  the  subject. 

Q.  And  so  just  —  a  minute  ago  when  you  mentioned  closed 
session,  what  --  what'd  you  mean  by  that? 

A.  In  the  Article  32  hearing  the  —  I  did  a  telephonic 
testimony.  And  I  was  told  that  that  portion  of  the  questioning  was 
in  closed  session  and  I'm  assuming  that  meant  that  only  pertinent 
individuals  needed  to  be  present  and  the  topic  of  allegiance  was 
covered  within  that  section. 

Q.  In  your  cross  you  mentioned  that  —  that  you  had  found  a 
camera  that  PFC  Manning  left? 

A.  Yes. 

Q.  What  did  —  what  did  you  do  in  response  to  that? 

A.  In  response;  I  investigated  it  'cause  at  that  point  I  was 
appointed  by  Lieutenant  Fields  to  kind  of  assist  her  in  being  the 
security  manager  of  the  SCIF.  So  at  that  point,  I  found  the  camera 
and  I  went  through  its  contents  to  —  to  ensure  that  there  was  no 
classified  information  on  it,  and  then  informed  Chief  Ehresman  and 
Lieutenant  Fields  that  I  had  found  the  camera  and  allowed  them  to 
investigate  the  pictures  as  well,  just  to  act  as  witnesses. 

ATC [CPT  OVERGAARD] :  One  moment,  please. 

[Pause] 

Q.  And  the  —  you  mentioned  a  Tweet  as  well  in  your  cross? 

A.  Yes. 
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Q.  When  did  you  send  that  Tweet? 

A.  I  don't  remember  the  exact  timeframe.  I  believe  it  was 

August  or  September  of  last  year.  I  was  - 

MJ:  When  you  say  last  year  you  mean  - 

WIT:  I  apologize.  2012. 

A.  I  had  —  myself  and  my  family  had  been  receiving  threats 
from  followers.  And  in  the  response  out  of  just  a  last  minute 
judgment  call,  I  Tweeted  that,  and  then  immediately  removed  it  from 
the  web  because  I  felt  as  though  it  was  probably  not  appropriate. 

But  somebody  had  taken  a  screenshot  of  it.  But  I  was  acting  out  of 
fear  for  myself  and  my  family. 

ATC [CPT  OVERGAARD] :  Thank  you. 

RECROSS-EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

CDC [MR .  COOMBS]:  I'm  showing  the  witness  what  has  been  marked 

Defense  Exhibit  VV  for  identification  [handing  the  document  to  the 
witness].  Ms.  Showman  if  you'd  look  at  that. 

[The  witness  did  as  directed.] 

Q.  Do  you  recognize  that? 

A.  Yes. 

Q.  Is  that  the  Tweet  that  you  sent  out? 

A.  Yes. 
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Q.  So  this  is  a  Tweet  apparently  that  you  sent  out.  And  you 
see  the  date  on  it? 

A.  I  do. 

Q.  And  that's  what? 

A.  12  September  2012. 

Q.  So  you  say  you  sent  this  out  in  response  to  threats  from 
followers? 

A.  Yes. 

Q.  And  then  —  and  then  that's  what  you  sent  out  in  response 
to  those  threats? 

A.  Yes. 

Q.  You'd  agree  with  me  that  that’s  basically  —  if  that  were 
true,  that  that  Tweet  wouldn't  exactly  convince  people  not  to 
continue  to  threaten  you? 

A.  Urn,  I  would  —  I  would  —  seeing  it  and  that's  why  I 
initially  pulled  it  off  because  I  --  I  had  the  understanding  that  if 

people  just  knew  the  truth  they  wouldn't  be  so  blatant  about  going 

after  myself  or  my  family.  Or  even  -- 

Q.  But  you  referred  to  those  same  —  I'm  sorry,  go  ahead. 

A.  —  or  even,  you  know,  following  I  guess  Manning  in  this  — 

in  this  manner.  So  it  —  I  was  actually  —  I  immediately  removed  it 

because  I  definitely  spoke  out  of  true  emotion.  So  it  —  it  —  yes  - 
-  but  these  are  my  words. 
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Q.  All  right.  So  you'd  agree  with  me  that  referring  to  those 
people,  if  they  knew  the  truth,  as  ignorant  people  or  ignorant 
followers,  that  —  that's  obviously  not  a  good  thing  to  do  if  people 
are  threatening  you? 

A.  I  —  I  —  I  do  understand  that,  and  I  agree  with  you. 

CDC [MR.  COOMBS]:  I'm  retrieving  from  the  witness  Exhibit  VV 

for  identification  [retrieving  the  document  from  the  witness]  and 
offering  into  evidence  as  Defense  Exhibit  W  for  identification  as 
Defense  Exhibit  W. 

MJ:  Any  objection? 

ATC [OPT  OVERGAARD] :  No,  ma'am,  no  objection. 

MJ:  Defense  Exhibit  VV' s  admitted. 

Q.  You  said  for  the  camera  incident  where  you  found  a  camera 
in  the  SCIF,  you  investigated  it? 

A.  Yes. 

Q.  And  I  take  it  you  investigated  it  because  having  a  camera 
in  a  SCIF  is  a  security  violation? 

A.  Yes. 

Q.  And  it's  a  security  violation  because  people  could  maybe 
taking  pictures  of  classified  information? 

A.  Correct. 
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Q.  And  so  you  felt  it  your  duty  at  that  point  to  investigate 
that  to  ensure  that  there  was  no  classified  information  on  the 
camera? 

A.  Yes. 

Q.  And  you  verified  that  there  was  none? 

A.  Correct. 

Q.  And  at  that  point  then,  because  you  investigated  it,  you  — 
you  then  reported  that  to,  I  think  you  said,  Ehresman? 

A.  Chief  Ehresman  and  Lieutenant  Fields. 

Q.  And  Lieutenant  Fields? 

A.  Yes. 

Q.  And  all  that  because  of  your  duty  of  protecting  classified 
information? 

A.  Correct. 

Q.  Can  you  see  how  then  if  you  thought  PFC  Manning  actually 
said  anti-American  comments,  disloyal  comments,  that  you  would  have  a 
similar  duty  to  protect  classified  information? 

A.  I  agree,  yes. 

Q.  Can  you  see  how  that  might  then  result  in  you  doing 
something  more  than  just  going  to  Sergeant  Adkins? 

A.  I  took  it  to  the  highest  ranking  individual  in  my  office, 

yes . 
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Q.  You  could  have  taken  it  to,  you  know,  the  S-2,  Major 
Clausen  at  the  time,  right? 

A.  He's  not  in  my  chain  of  command,  sir. 

Q.  All  right.  Did  you  have  an  officer  in  your  chain  of 
command? 

A.  I  was  enlisted  so  therefore  my  chain  of  command  were 
enlisted  Soldiers,  sir. 

Q.  Did  you  have  an  officer  that  supervised  you? 

A.  No. 

Q.  You  had  no  officer  that  was  in  your  chain,  is  that  what 
you're  trying  to  tell  us? 

A.  No. 

Q.  None  whatsoever? 

A.  No. 

Q.  Okay.  So  when  you're  referring  to  chain,  I  take  it  you're 
referring  to  people  who  might  rate  you? 

A.  Correct.  In  a  way  of,  I  guess,  explaining  that  for  people 
to  understand.  Officers  had  their  own  kind  of  area.  And  the  NCOs 
were  to  take  care  of  the  Soldiers.  And  the  head  NCO  would  report  to 
the  —  the  NCOIC;  the  noncommissioned  officer  in  charge,  therefore 
reported  to  the  OIC;  the  officer  in  charge. 

Q.  All  right,  now  who  was  that  officer  in  charge? 

A .  Urn - 
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MJ:  When? 

Q.  At  the  time  of  —  of  this  statement  that's  been  allegedly  - 

A.  I  truthfully  do  not  remember  his  name.  He  —  he  —  I  do 
know  that  he  was  the  S-2  that  initially  deployed  with  us  and, 
therefore,  was  removed  as  an  S-2  partially  through  deployment.  I 
don't  recall  his  name,  though. 

Q.  Does  Major  Clausen  sound  familiar? 

A.  Yes.  Yes. 

Q.  All  right,  so  Major  Clausen  could  have  been  somebody  as  the 
OIC  that  you  went  to  report  a  security  issue? 

A.  That  Sergeant  Adkins  would  have  gone  to,  yes. 

Q.  No,  I'm  saying  for  you  - 

A.  No. 

Q.  -  Major  Clausen  could  have  been  somebody  you  could  have 

reported  to? 

A.  If  I  wanted  to  step  out  of  the  line  of  chain  of  command, 
yes,  he  would  have  been  somebody  that  I  could  have  gone  to. 

Q.  Then  you  said  that  there  was  an  incident  in  which  an  NCO 
made  an  allegation  against  PFC  Manning? 

A.  Yes. 

Q.  And  then  you  apparently  got  some  information  from  PFC 
Manning  on  that? 
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A.  Yes. 

Q.  And,  you  know,  you  were  basically  telling  him  that  you 
we're  not  going  to  take  the  word  of  an  NCO? 

A.  Correct. 

Q.  And  —  and  that  determination  was  based  upon  what? 

A.  That  —  I  believed  Manning's  side  of  the  story.  And  even  - 

-  even  if  —  even  if  the  NCO  was  true,  I  don't  —  I  don't  see  how  it 
took  away  from  —  from  our  mission  whether  —  whether  Manning  did 
those  things  or  not;  did  it  affect  the  mission  in  the  long  run?  And 
myself  and  Sergeant  Adkins  decided  that  it  did  not.  So,  therefore  — 
you  know. 

Q.  All  right.  So  an  NCO  makes  an  allegation,  PFC  Manning 
gives  you  some  information,  you  choose  to  believe  PFC  Manning? 

A.  Yes. 

Q.  And  then  at  that  point  you  and,  I  guess,  you  said  Sergeant 
Adkins? 

A.  Correct. 

Q.  Make  the  determination  that  you're  not  going  to  entertain 
the  allegation  made  by  this  NCO? 

A.  Correct  —  well,  we  weren't  going  to  entertain  his  desired 
outcome. 

Q.  And  that  desired  outcome  was  separation? 

A.  Correct. 
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Q.  And  at  —  at  least  at  that  point  —  and  you  might  not  have 
known  because  of  your  rank,  but  at  that  point  did  you  understand  the 
policy  of  "Don't  Ask,  Don't  Tell?" 

A.  Yes. 

Q.  Did  you  understand  the  duty  of  when  there  is  an  allegation 
of  conduct  what  the  unit  had  to  do? 

A.  Correct. 

Q.  And  did  you  guys  investigate? 

A.  I  did  not  personally.  I  don't  know  if  Sergeant  Adkins, 
without  informing  me,  if  he  did  anything  further.  But  to  my 
knowledge,  apart  from  speaking  with  that  noncommissioned  officer  that 
apparently  witnessed  him,  that's  all  —  that's  all  that  I  know  of. 

Q.  And  as  far  as  being  an  intelligence  analyst,  are  you  aware 
or  not  of  a  concern  from  a  security  standpoint  if  somebody  is  —  is 
gay  in  the  military? 

A.  I'm  not  aware  of  homosexuals  being  a  security  risk. 

Q.  So  you're  not  aware  through  your  training  at  all  of 
somebody  having  a  lifestyle  or  whatnot  that  could  subject  them  to 
being  blackmailed  in  order  to  keep  that  secret  and  therefore  they 
might  become  a  security  risk? 

A.  Not  to  my  knowledge. 

Q.  No  one  has  ever  trained  you  on  that? 

A.  No,  not  to  my  knowledge. 
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Q.  So  that  wouldn't  be  one  of  the  things  that  you're  looking 
for,  somebody  who  might  have  a  secret  that  they  want  to  keep,  and 
could  be  subject  to  blackmail  and  then  forced  to  give  information  to 
hide  that  secret? 

A.  Not  —  not  under  the  context  of  homosexuality.  But  that's 
also  not  a  determination  for  someone  of  my  rank  to  make. 

Q.  Okay.  So  when  you're  —  when  you're  thinking  about  all  the 
—  the  things  in  your  mind  that  might  get  you  to  believe  he's  a 
potential  spy,  I  mean,  his  emotional  reactions,  his  problems  with  — 
with  you,  any  sort  of  potential  blackmail  against  him  to  hide  a 
secret  wouldn't  be  one  of  the  factors  that  you  thought  of? 

A.  I  honestly  never  thought  that  someone  would  blackmail  him 
for  his  sexuality. 

Q.  Okay.  And  you  indicated  that  you  only  had  NCOs  in  your 
chain? 

A.  Correct. 

Q.  First  Sergeant  was  one  of  those  people  then  I  guess? 

A.  Beyond  Sergeant  Adkins,  correct. 

Q.  And  so  did  you  ever  go  to  the  First  Sergeant  to  talk  about 
the  alleged  allegation  against  my  client? 

A.  No. 

Q.  Why  not? 

A.  I  felt  it  was  inappropriate. 
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Q.  Why? 

A.  Because  I  had  gone  to  my  appropriate  chain  of  command,  and 
they  informed  me  they  would  handle  it,  and  that  is  all  I'm  obligated 
to  do. 

Q.  That's  all  you  thought  you're  obligated  to  do? 

A.  That  is  what  I  felt  was  appropriate  to  do,  yes. 

CDC [MR .  COOMBS]:  All  right.  No  further  questions. 

MJ:  Any  final  redirect? 

REDIRECT  EXAMINATION 

Questions  by  the  assistant  trial  Counsel  [CPT  OVERGAARD] : 

Q.  Could  you  tell  us  why  you  reported  the  camera  incident  to 
Lieutenant  Fields  and  Chief  Ehresman? 

A.  Cameras  in  the  SCIF  could  be  a  - 

Q.  I  mean  them  versus  somebody  else. 

A.  Oh,  Lieutenant  Fields  was  the  security  manager  and  Chief 
Ehresman  was  the  FUSION  N  —  OIC.  They  were  both  —  so  Chief 
Ehresman  was  in  charge  of  the  FUSION  cell,  which  that's  where  we 
worked,  and  Lieutenant  Fields  was  the  security  manager  at  the  time. 
ATC [CPT  OVERGAARD]:  All  right.  Thank  you. 

CDC [MR.  COOMBS]:  Just  one  follow-up  on  that  then. 

[END  OF  PAGE] 
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RECROSS-EXAMINATION 

Questions  by  the  civilian  defense  Counsel  [MR.  COOMBS] : 

Q.  Did  you  have  a  security  manager  when  you  were  in  garrison? 

A.  Yes. 

Q.  Who  was  that? 

A.  For  the  majority  of  the  time  I  believe  it  was  Chief 
Balonek;  at  that  time  Staff  Sergeant  Balonek. 

Q.  Okay,  so  you  recognized  a  security  issue  with  PFC  Manning 
of  having  no  loyalty  to  the  flag  or  the  country,  did  you  go  report 
that  to  that  security  manager.  Chief  Balonek? 

A.  I  --  from  what  --  from  my  memory  on  the  timeline,  I  do  not 
believe  he  was  actually  at  Fort  Drum  at  that  time.  I  believe  —  I 
believe  that  Lieutenant  Fields  was  coming  into  the  shop  and  was  take 
—  beginning  to  take  over  as  a  security  manager  at  that  time  - 

Q.  All  right. 

A.  -  because  they  had  a  hand  off. 

Q.  Did  you  report  it  to  Lieutenant  Fields? 

A.  No,  that  would  have  been  inappropriate  for  me  to  go  to  my 
officer  in  my  office  without  —  without  discussing  it  with  my  NCOs . 

Q.  Okay.  So  then  I  take  it  from  that  then  for  the  camera 
incident  before  you  went  to  Lieutenant  Fields  you  must  have  discussed 
it  with  your  NCO? 
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A.  I  --  at  that  time  actually  I  did  not  have  an  NCO  chain  of 

command.  There  was  an  OIC.  I  worked  directly  for  Chief  Hack.  And  I 
—  there  was  an  NCOIC  over  the  shop,  and  that  was  Sergeant  Adkins, 
and  he  actually  was  not  in  --  in  the  fusion  cell  at  that  time.  So  I 
went  to  the  security  manager  because  there  was  actual  —  an  active 
security  risk  in  the  SCIF,  which  was  a  camera. 

Q.  All  right,  so  whether  or  not  you  report  it  to  the  secure 
manager  in  your  mind  is  whether  or  not  it's  appropriate  or  not? 

A.  I  took  it  to  the  appropriate  chain  of  command,  so  I  did  the 
appropriate  thing. 

CDC [MR.  COOMBS]:  Okay. 

MJ:  Any  true  final  redirect? 

ATC [CPT  OVERGAARD] :  No,  ma'am. 

MJ:  Temporary  or  permanent? 

ATC [CPT  OVERGAARD]:  Temporary,  ma'am. 

[The  witness  was  temporarily  excused,  duly  warned,  and  withdrew  from 
the  courtroom . ] 

TC [MAJ  FEIN]:  Can  we  have  a  moment.  Your  Honor? 

MJ:  Yes. 

[Pause] 

TC [MAJ  FEIN]:  Sorry,  Your  Honor. 

MJ:  I'm  sorry. 
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TC [MAJ  FEIN]:  Thank  you.  Your  Honor.  Looking  at  the  time,  the 
United  States  recommends  —  other  than  I  can  answer  the  Court ' s 
question  from  before,  but  after  that  that  we  go  on  lunch  recess  and 
then  come  back  and  continue. 

MJ:  Does  the  Government  have  further  rebuttal? 

TC [MAJ  FEIN]:  Your  Honor,  the  United  States  would  like  to 
discuss  that  over  lunch  during  the  recess.  We  don't  need  an  extended 
recess  to  do  that.  Otherwise  it  was  not  planned,  but  based  off  that 
testimony  there  might  be. 

MJ:  Okay.  Why  don't  you  answer  my  question  first  on  the  641? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Yes,  ma'am.  Your  Honor,  looking  at 
the  evidence,  the  bottom  line  is  the  United  States  does  agree  that 
the  CIDNE  database  --  the  entire  CIDNE  database  did  contain  other 
types  of  records.  Prosecution  Exhibit  116,  which  is  the  Stipulation 
of  Expected  testimony  of  Mr.  Patrick  Hoeffel,  Paragraph  8,  Mr. 

Hoeffel  testified  it  is  a  structured  collection  of  data  with  over  100 
different  types  of  reports  including  SIGACTs.  And  then  there  was 
other  testimony  that  SIGACTs  took  up  about  24  percent  of  the  actual 
CIDNE  database. 

MJ:  Twenty-four  percent? 

TC [MAJ  FEIN]:  Yes,  ma'am.  And  that  was  Mr.  Bora's  testimony  — 
the  24  percent. 
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MJ:  All  right.  That  being  the  case,  what  is  the  government's 
position  with  respect  to  the  defense  R.C.M  917  motions?  Does  that 
alter  it  in  any  way? 

TC [MAJ  FEIN]:  Your  Honor  —  Your  Honor,  the  United  States  would 
say  it  doesn't  affect  for  917  purposes  because  any  evidence  of  a 
subportion  is  evidence  of  a  greater  of  the  database.  However,  with 
that  being  said,  it  is  clear  that  the  government  did  not  present 
evidence  that  the  entire  CIDNE  database  was  compromised,  it's  only 
approximately  24  percent  at  that  time  when  it  was  stolen. 

MJ:  So  what  is  the  government's  position  with  respect  to  what 

the  court  should  do  in  the  917  motion? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  would  argue  that 
the  917  motion  should  be  denied  in  —  in  full. 

MJ:  And  the  specifications  should  remain  as  is? 

TC [MAJ  FEIN]:  Yes,  ma'am,  for  917  purposes. 

MJ:  Well,  if  you  presented  no  evidence  that  the  entire  database 

was  stolen;  that's  what  you're  alleging  in  Specifications  5  and  7,  I 
mean  4  and  6,  excuse  me  —  I  believe  those  were  the  specifications  at 
issue . 

CDC [MR.  COOMBS]:  That's  correct. 

TC [MAJ  FEIN]:  Yes,  ma'am.  Ma'am,  the  government,  through  its 
briefs,  have  provided  evidence  that  a  sub  —  proving  the  subportion 
is  evidence  of  a  greater  portion,  but,  again  —  to  make  this  easier. 
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Your  Honor,  for  917,  the  United  States  would  then  recommend  the  court 
would  —  would  find  by  exceptions  and  substitutions  for  917  purposes 
because  that  is  what  the  government  will  argue  eventually  anyways. 

MJ:  And  find  by  exceptions  and  substitutions  what? 

TC [MAJ  FEIN]:  Yes,  Your  Honor.  There  are  multiple  manners 
where  the  trier-of-fact  can  find  then  specifically  now  that  you  in 
your  —  with  your  hat  as  the  Court. 

First,  Your  Honor,  looking  at  Specification  — 

Specification  4  as  the  example,  the  United  States  has  in  its 
specification  a  record  a  thing  of  value  of  the  United  States  or  of  a 
Department  or  Agency  thereof,  to  wit.  It  currently  states  that  the 
Combined  Information  Data  Network  Exchange  in  Iraq  containing  more 
than  380,000  records.  An  exception  and  substitution  should  be  a 
portion  of  the  Combined  Information  Data  Network  Exchange  containing 
380,000  records  because  that  would  be  a  sub  of  the  whole  or  part  of 
the  whole.  Therefore,  there's  adequate  notice  that  the  entire 
database  was  stolen  and  a  sub  or  a  portion  of  it  falls  within  that  as 
a  minor  variance. 

MJ:  All  right,  assume  I  do  that  for  evaluation  purposes,  what's 

the  government's  position? 

TC [MAJ  FEIN]:  Your  Honor,  the  government's  position  for 
valuation  purposes  is  that  the  United  States  would  then  be  arguing  in 
—  for  914  purposes  —  917  purposes  is  arguing  now  that  the  —  when 
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it  comes  to  —  well,  there's  two  ways,  of  course,  the  Government  is 
offering  evidence  to  prove  valuation,  it's  either  through  the 
development  of  maintenance  costs,  and  then  there's  also  the  valuation 
of  the  information  contained  within.  So  for  the  development  of 
maintenance  costs  it  would  be  a  pro  rata  share.  The  testimony  we've 
had  is  that  approximately  24  percent  of  the  CIDNE  database  contained 
the  SIGACTs,  and  so  that  would  be  what  the  United  States  would  be 
arguing  is  that  percent  of  the  total  of  the  maintenance  and 
development  costs  to  maintain  the  information  in  exclusive  possession 
of  the  government  would  go  to  that.  For  the  cost  to  a  foreign 
intelligence  service,  based  off  the  testimony  of  Mr.  Lewis,  it  was 
based  off  the  actual  information  he  looked  at.  So  that  would  not 
necessarily  change  the  specification  because  he  reviewed  a  few 
documents  —  the  charged  documents,  and  that  was  definitely  less  than 
380,000  or  the  —  for  Specification  6,  the  lesser  number  --  the 
90,000  records. 

MJ:  All  right.  And,  finally,  with  the  development  and 

maintenance  costs  that  the  government  is  relying  upon,  is  there  any 
case  that  you're  aware  of  that  has  allowed  that  as  a  method  of 
evaluation  for  electronic  data? 

TC [MAJ  FEIN]:  Not  necessarily  for  the  development  costs,  ma'am, 
but  the  operation  costs  to  protect  the  information,  yes. 

MJ:  Okay.  And  what  would  that  be? 
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TC [MAJ  FEIN]:  Zettl  and  May ,  ma'am? 

MJ:  All  right.  May  —  May  is  the  airline  —  airline  case, 

right? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  Okay,  so  that  didn't  involve  electronic  data.  That 

involved  something  else,  right? 

TC [MAJ  FEIN]:  Yes,  ma'am.  It  involved  other  information. 

Walter  is  the  database  case. 

MJ:  And  what  did  that  rely  on  for  valuation? 

TC [MAJ  FEIN]:  One  —  one  of  the  major  factors  was  personnel 
costs.  Your  Honor.  And  that  is  the  evidence  that  the  government  has 
presented  for  all  of  641  offenses,  the  —  the  costs  for  personnel  — 
the  personnel  time.  Of  course,  it  will  be  —  the  argument,  it  would 
be  prorated  out.  But  the  Court's  taken  judicial  notice  of  different 
GS  salaries  and  Soldiers'  salary. 

MJ:  Okay.  Thank  you.  Defense,  in  light  of  the  24  percent 

information  what  —  I  understand  your  general  argument,  but  does  that 
change  your  position  in  any  way? 

CDC [MR .  COOMBS]:  Yes,  because  I  think  at  this  point  what  the 

government  is  trying  to  do  is  avoid  asking  for  a  variance  under  603 
and  have  you  skip  past  the  917  motion.  I  think  they  have  to  ask  at 
this  point  to  do  a  variance  to  the  charge  sheet.  And  - 

MJ:  A  change  to  the  Charge  Sheet  you  mean? 
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CDC [MR .  COOMBS]:  Yes  —  excuse  me,  yes,  a  change  to  the 

Charge  Sheet.  And  our  opinion  then  the  change  that  they  propose,  the 
portion  of,  would  be  a  major  amendment.  It  would  change  the  identity 
of  the  charged  item. 

MJ:  And  that's  based  on  your  view  that  it's  a  stealing  of  a 

database  without  records? 

CDC [MR.  COOMBS]:  Right.  And  —  and  so  that  would  be  our 

position;  that  first  they  would  have  to  articulate  that  they  — 
they're  asking  this  court  to  make  an  amendment  to  the  Charge  Sheet. 

MJ:  So  is  it  the  defense's  position  that  should  I  find  that  — 

well,  —  although  it  would  be  inappropriate  for  the  court  to  find 
that  it's  a  lesser  included  offense? 

CDC [MR.  COOMBS]:  Yes. 

MJ:  Because  of  the  theft  of  the  database? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor. 

[Pause] 

MJ:  All,  right,  government,  you've  heard  the  defense  position. 

Does  the  Government  want  to  propose  a  change? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  would  propose  a 
change;  that  is  a  minor  change  after  arraignment  under  603(c).  The 
accused  was  on  notice  of  the  greater  —  the  greater  —  the  whole  — 
the  entire  database;  this  is  just  a  portion  or  part  of  the  database. 

MJ:  That  would  be  for  Specifications  4  and  6? 
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TC [MAJ  FEIN]:  Your  Honor,  that  would  be  for  Specifications  4 
and  6. 

MJ:  Of  Charge  II. 

TC [MAJ  FEIN]:  Of  Charge  II.  May  I  have  a  moment.  Your  Honor? 

[Pause] 

TC [MAJ  FEIN]:  Also  for  Specification  16,  Your  Honor,  of  the 

GAL. 

[Pause] 

MJ:  All  right.  What  are  the  minor  changes  that  you  propose  — 

or  the  allegedly  minor  changes  that  you  propose  for  those  three 
specifications? 

TC [MAJ  FEIN]:  Ma'am,  it's  a  --  the  same  minor  change  the  United 
States  offers  —  or  argues  as  minor  for  all  of  it.  So,  "to  wit:  a 
portion  of"  for  Specification  4,  6  and  16  of  Charge  II. 

MJ:  "A  portion  of."  Let  me  pull  the  specifications. 

[Pause] 

MJ:  So  it  would  be  after  "to  wit:  a  portion  of  the  Combined 

Information  Data  Network  Exchange-Iraq  database." 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  All  right.  And  - 

TC [MAJ  FEIN]:  Then  the  same  for  Specification  6,  "to  wit:,  a 
portion  of  the  Combined  Information  Data  Network  Exchange- 
Afghanistan. " 
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MJ:  Well,  for  Specification  16  of  Charge  II,  then  what's  the 

government's  position  on  what  the  evidence  has  shown? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Chief  Nixon  testified  about,  first, 
how  the  Global  Address  Lists  are  populated  and  —  and  what  it  means 
to  have  the  Global  Address  List  at  that  time  in  Iraq.  He  was  at  the 
three  —  four-star  headquarters,  and  he  testified  that  although  there 
was  approximately  160,000  users  in  the  active  directory  that 
populated  GAL,  the  information  was  populated  from  the  brigade's 
higher.  So  as  they  put  their  information  onto  their  GAL,  it 
continued  going  —  populated  up  and  out.  And  so  what  that  testimony 
shows.  Your  Honor,  is  that  the  —  when  he  testified  that  —  or  excuse 
me.  Special  Agent  Williamson  testified  through  a  Stipulation  of 
Expected  Testimony  that  he  recovered  approximately  76,000  different 
e-mail  and  other  —  e-mail  addresses  and  names  with  office  and  other 
identifying  information  in  total  from  Private  First  Class  Manning  -- 
or  —  excuse  me,  from  Sergeant  Bigelow's  work  computer.  And  then 
extracts  of  that  were  found  by  Mr.  Johnson  on  Private  First  Class 
Manning's  personal  Macintosh  computer. 

So  based  off  that.  Your  Honor,  and  Chief  Nixon's  review  of 
—  I  can  find  the  PE  number  as  well  —  the  extracts. 

[Pause] 

TC [MAJ  FEIN]:  Based  off  Chief  Nixon's  review  of  Prosecution 
Exhibits  47  and  48,  which  were  both  the  CDs  containing  the  files  of 
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all  the  names  and  e-mail  —  the  two  different  files,  and  then 
specifically,  in  court,  he  referenced  —  he  testified  about  147  Alpha 
and  147  Bravo,  148  Alpha,  148  Bravo.  Each  of  those  147s  and  the  148s 
were  extracts  from  those  original  evidence.  And  then  he  testified,  I 
think  it's  the  first  10  pages,  on  how  that  is  the  information  from 
the  master  Global  Address  List  for  the  USFI  Global  Address  List. 

MJ:  And  who  testified  as  to  this;  Nixon? 

TC [MAJ  FEIN]:  Chief  Warrant  Officer  Four  Nixon,  Your  Honor. 

MJ:  Okay. 

TC [MAJ  FEIN]:  And  in  his  testimony  he  explained  how  the  lowest 
level  that  a  Global  Address  List  is  created,  a  user  accounts  at  the 
brigade  level,  and  at  the  brigade  it  feeds  up  to  the  Division, 
Division  feeds  up  to  the  higher  headquarters. 

MJ:  So  is  the  Government  then  in  their  proposed  change  to 

Specification  16,  are  you  charging  only  the  76,000? 

TC [MAJ  FEIN]:  Yes,  ma'am,  because  that's  all  that  was  actually 
found. 

MJ:  All  right.  Maybe  I'm  confused.  I  thought  the  government 

theory  earlier  was  there  may  be  deletion  or  something  like  that  and 
there  was  more. 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  confusion  there  is  we're  talking 
about  two  different  computer  systems  to  show  how  a  transfer  did  occur 
off  the  U.S.  Government  computers.  The  --  Special  Agent  - 


10817 


1 

2 

3 

4 

5 

6 

7 

8 

9 

10 

11 

12 

13 

14 

15 

16 

17 

18 

19 

20 

21 

22 

23 


O 


o 


MJ:  Let's  make  this  easy. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  How  many  addresses  are  you  alleging  was  stolen  — 

TC [MAJ  FEIN]:  76,000,  Your  Honor  - 

MJ:  -  in  Specification  16? 

TC [MAJ  FEIN]:  -  and  I'll  give  you  to  the  PE. 

[Pause] 

TC [MAJ  FEIN]:  I'm  sorry.  Your  Honor,  I'm  still  scanning. 
[Pause] 

TC [MAJ  FEIN]:  Ma'am,  Prosecution  Exhibit  143. 

MJ:  Is  what? 


TC [MAJ  FEIN]:  Is  the  Stipulation  of  Expected  Testimony  of 
Special  Agent  Williamson  from  CCIU.  And  in  his  Stipulation  of 
Expected  Testimony,  he  explains  exactly  how  many  e-mails  —  the  two 
large  text  files  called  blaw.txt  that  were  recovered  from  that 
computer  and  —  and  —  I  apologize,  Your  Honor,  I  should  have  read 
this  first  —  74,000  was  the  exact  testimony  on  this  Stipulation  of 
Expected  Testimony  is  —  74,000  exchange  formatted  e-mail  addresses, 
and  then  their  associated  names  in  a  separate  file. 

M J :  So  what  is  the  proposed  change  that  the  government  wants  to 
make  to  Specification  16  of  Charge  II? 

TC [MAJ  FEIN]:  Yes,  ma'am.  The  United  States  proposes.  Your 
Honor,  that  the  —  the  minor  change  would  be  after  "to  wit  a  portion 
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of"  and  then  "the  United  States  forces  Iraq  Microsoft  Outlook 
SharePoint  exchange  global  server  address  list  containing"  - 

MJ:  Hold  on. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  All  right,  "to  wit:  a  portion  of".  Anything  else? 

TC [MAJ  FEIN]:  No,  ma'am,  actually  just  "a  portion"  would  be  the 
same  as  4  and  6  —  Specifications  4  and  6. 

MJ:  All  right.  Defense,  I  assume  your  objection  is  the  same  as 

for  the  others? 

CDC [MR .  COOMBS]:  Additional  matters,  ma'am.  So  we  would 

object  now  that  they're  asking  for  an  amendment,  that  it  is  a  major 
amendment  and  looking  at  603,  it  indicates  that  a  major  amendment  is 
essentially  anything  that  adds  a  party  —  offense.  And  then,  what's 
important  is,  it  has  then  two  "or's";  "or"  a  substantial  matter  not 
fairly  included  in  the  previous  preferred  charge.  And  then  another 
"or";  "or"  which  are  likely  to  mislead  the  accused  as  to  the  offenses 
charged.  So  if  it  fits  in  any  of  those  three  it's  a  major  amendment. 
Our  position  is  that  it  clearly  fits  in  the  last  one,  which  is  a 
matter  which  is  likely  to  mislead  the  accused  on  the  offenses 
charged.  We  did  not  get  an  opportunity  to  cross-examine  any  of  the 
witnesses  on  this  new  pro  rata  —  pro  rata  —  pro  rata  theory  that 
the  Government  now  is  —  is  asking  the  Court  to  use  for  valuation. 

All  the  evidence  introduced  from  all  the  witnesses  was  on  the 
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evaluation  of  the  whole  database.  Importantly,  no  court  has  allowed 
a  pro  rata  basis  for  evaluation.  And  the  case  the  court  should  look 
to  is  the  Wilson  court.  Because  in  the  Wilson  court  you  had  100 
rifles,  and  the  idea  was  use  a  pro  rata  value  of  a  $1.39  in  order  to 
get  to  the  $100.00.  And  the  court  said  there  that  is  not  —  that  is 
not  —  that's  purely  speculative.  That's  not  a  basis. 

MJ:  Well,  Wilson  offered  no  evidence  of  valuation  at  all, 

right? 

CDC [MR .  COOMBS]:  Wilson  —  no  —  and  that's  correct.  They 

relied  essentially  on  trying  to  say  that  we'll  just  look  at  what  it 
is  and  you  just  —  in  order  to  get  over  the  $100.00  threshold,  it's 
just  $1.39.  So  it's  actually  less  than  100  rifles.  I  think  it  might 
have  been  70.  But  the  defense's  position  would  be  that  that  would  be 
a  — a  case  that  would  support  the  idea  that  any  sort  of  pro  rata 
portion  in  order  to  come  to  a  valuation  is  an  inappropriate  manner  in 
order  to  conclude  what  a  particular  item  is  worth.  You  need  somebody 
to  testify  what  the  item  is  worth. 

Additionally,  we  have  testimony  with  —  certainly  with 
regards  to  CIDNE,  but  I  think  this  would  apply  to  the  GAL  as  well, 
you  have  a  database  that  has  unlimited  capability.  It's  constantly 
being  added  to.  It's  constantly  growing,  changing,  evolving.  There 
—  there  is  no  testimony  to  indicate  that  there  was  a  capacity  level 
for  this.  So  to  —  to  do  a  snapshot  in  time  of  how  much  it  cost  to 
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create  the  database  or  maintain  the  database  is  purely  speculative 
with  relation  to  then  —  if  you're  going  to  use  a  pro  rata,  to  then 
say  okay,  let's  use  24  percent.  Well,  at  what  point  in  time  are  you 
going  to  make  that  calculation?  When  they  first  created  the 
database?  Right  when  he  took  the  items  —  because  we  had  no  evidence 
as  to  the  value  of  the  database  at  the  time  that  he  took  the  items  — 
or  at  some  later  point.  You  know  —  so  there  really  is  no  ability  to 
do  the  so-called  pro  rata  portion.  The  defense's  position  on  Chief 
Nixon,  he  testified  that  if  this  was  anything  it  was  the  Division  GAL 
—  is  what  he  thought  —  or  a  portion  thereof.  You  know,  the  Court 
obviously  can  go  back  to  the  record  in  determining  this  motion  as  to 
what  Chief  Nixon  actually  testified  to.  So  our  first  position  would 
be  that  this  would  be  a  major  amendment.  Now  based  upon  - 

M J :  Now,  let  me  ask  you  a  question. 

CDC [MR .  COOMBS]:  Yes,  Your  Honor. 

MJ:  Should  the  Court  find  that  the  charged  charges;  the  theft 

of  the  database  as  well  as  the  records,  what  the  defense's  position? 

CDC [MR.  COOMBS]:  Well,  again  the  - 

MJ:  Because  it's  a  subset  of  the  records  basically. 

CDC [MR.  COOMBS]:  Okay.  So  if  the  Court  does  that  —  I  think  you 
still  have  all  the  problems  we  addressed  yesterday  with  valuation  and 

MJ:  I  understand  that. 
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CDC [MR .  COOMBS]:  —  and  whatnot.  But  then  we  would  fall  back 
under  R.C.M.  915,  Your  Honor.  We  would  say  that  —  we  would  request 
under  R.C.M.  915,  that  the  Court  declare  a  mistrial  with  regards  to 
these  specifications. 

MJ:  Why? 

CDC [MR.  COOMBS]:  Under  R.C.M  915,  a  mistrial  would  be 
appropriate  granted  that  it  is  a  —  a  remedy  that  should  be  used  with 
great  caution,  but  it  is  appropriate  when  substantial  doubt  upon  the 
fairness  of  the  proceedings  has  resulted.  And  a  mistrial  may,  as  the 
rule  says,  be  declared  as  some  or  all  of  the  charges.  In  this 
instance  here,  what  we  have  is  we  have  a  government  who  has  charged 
something  clearly.  Has  —  in  their  bill  of  particulars,  has  alleged, 
again,  what  it  is;  the  database,  has  maintained  that  in  the  way 
they've  proven  the  case,  has  then  done  31  pages  of  inconsistent  FS 
motions  on  their  theory  or  how  they're  proving  something,  and  then 
now  at  a  very  late  date  has  gone,  you  know  what,  let's  make  some 
changes  because,  yeah,  we  didn't  charge  it  right.  And  we  now  are 
looking  back  at  all  the  evidence  to  try  to  piece  together  or 
piecemeal  together  a  —  one,  what  did  you  charge?  Two,  did  you  prove 
the  value?  And  if  pro  rata  was  their  way  of  trying  to  prove  this 
value,  we  didn't  have  an  opportunity  to  cross-examine  on  that  at  all. 
So  at  this  point  the  mess  that's  been  created  is  —  is  because  of  the 
individuals  sitting  at  the  trial  counsel  table.  And  my  client 
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shouldn't  pay  for  that.  Instead,  if  this  Court  doesn't  grant  the  917 
motion,  this  Court  should  grant  now  our  request  under  R.C.M.  915  to 
declare  a  mistrial  with  regards  to  these  specifications  —  the  641 
specifications . 

MJ:  All  right.  Well,  the  Court  will  take  all  of  these  issues 

under  advisement  when  doing  the  omnibus  ruling  on  the  variety  of 
issues  that  have  been  raised  with  respect  to  the  R.C.  —  the  641 
specifications . 

TC [MAJ  FEIN]:  Ma'am,  if  possible  just  a  factual  clarification? 

MJ:  Yes. 

TC [MAJ  FEIN]:  The  defense  alleged  that  they  did  not  have  an 
opportunity  to  question  witnesses  about  the  pro  rata  share.  Actually 
every  witness  that  essentially  took  the  stand  starting  with  Chief 
Nixon,  the  questions  were  directly  at  how  much  of  the  energy  goes 
into  the  system  that  is  directly  to  the  GAL  to  the  rest  of  the  active 
directory  functions.  That  --  that  line  of  questioning  was  actually 
elicited.  And  —  and  that  is  the  same  for  all  the  other  individuals 
as  well  --  how  much  went  into  actually  CIDNE  versus  —  or  SIGACTS 
versus  other  aspects  of  CIDNE. 

MJ:  All  right.  The  court  will  examine  the  evidence.  I  believe 

before,  the  government,  you  asked  for  a  recess  or  a  lunch  break  about 
—  about  that  time? 

TC [MAJ  FEIN]:  Yes,  ma'am.  Just  a  standard  lunch  break,  and 
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then  we  can  make  a  final  decision  about  the  closing  rebuttal  case. 
Your  Honor. 

MJ:  All  right.  1330? 

TC [MAJ  FEIN]:  Yes,  ma'am. 

CDC [MR .  COOMBS]:  Yes,  ma'am. 

MJ:  All  right.  Court  is  in  recess  until  1330. 

[The  court-martial  recessed  at  1216,  19  July  2013.] 

[The  court-martial  was  called  to  order  at  1337,  19  July  2013.] 

MJ:  Court  is  called  to  order.  Let  the  record  reflect  all 
parties  present  with  the  Court  last  recessed  are  again  present  in  the 
court.  Major  Fein? 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  does  not  have  any 
further  evidence  to  offer  in  rebuttal. 

MJ:  All  right.  Do  we  have  a  surrebuttal  case? 

CDC [MR.  COOMBS]:  Yes,  Your  Honor.  First  we  would  have  a 
judicial  notice  request. 

ADC [CPT  TOOMAN] :  Ma'am,  yesterday  the  government  offered  as 
Prosecution  Exhibit,  I  believe  it's,  194  Charlie,  a  Tweet  from 
WikiLeaks.  It  reads  WikiLeaks  is  currently  under  an  aggressive  U.S. 
and  Icelantic  Surveillance  Operation 

following/photographing/filming/detaining.  The  defense  objected  to 
that.  We  didn't  believe  it  was  proper  rebuttal  because  we  didn't 
feel  that  actually  rebuts  the  idea  that  WikiLeaks  is  a  legitimate 
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journalistic  organization.  The  Court  overruled  that.  We  still  don't 
think  this  has  any  bearing  whether  on  whether  or  not  WikiLeaks  is  a 
journalistic  organization,  but  I  guess  we're  presuming  that  —  what 
the  government  would  argue  or  the  connection  they  would  try  to  make 
would  be  that  if  —  because  WikiLeaks  is  under  surv  —  surveillance 
by  the  United  States  they  are  not  a  legitimate  journalistic 
organization.  To  rebut  that  we  have  Defense  Exhibit  Whiskey  Whiskey 
for  identification,  which  are  three  records  pulled  from  the  FBI 
records  vault  —  three  records  pulled  by  —  pulled  by  the  defense 
from  the  FBI  records  vault  —  official  records  from  the  FBI  where 
they  outline  basically  that  they  kept  records  of  Mike  Wallace,  Ernest 
Hemingway,  as  well  as  Paul  Harvey.  In  the  descriptions  they  refer  to 
these  individuals  as  journalists,  and  so  we  would  offer  this  to  rebut 
the  ideas  —  I  guess  our  position  is,  clearly  the  United  States  does 
to  investigations  or  surveillance  on  people  who  are  legitimate 
members  of  the  media  and  journalists,  and  so  the  idea  that  one  isn't 
a  legitimate  journalist  because  they  are  surveilled  would  be  rebutted 
by  and  this. 

MJ:  I  thought  that  the  relevance  was  that  it  was  on  PFC 

Manning's  computer  and  what  PFC  Manning  thought  about  WikiLeaks? 

ADC [CPT  TOOMAN] :  Our  understanding  was  that  it  offered  to  rebut 
the  idea  that  WikiLeaks  is  a  journalistic  organization  —  is  our 
understanding  of  why  the  government  offered  these  Tweets. 
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MJ:  Government,  why  did  you  offer  the  Tweets? 

TC [MAJ  FEIN]:  Ma'am,  the  United  States  offered  the  Tweets  for 
actually  both  —  well,  not  both  the  reasons,  but  it's  what  PFC 
Manning  knew  or  would  have  known  at  the  time  because  it  was  on  his 
computer.  So  this  is  not  relevant  because  there's  no  evidence  that 
PFC  Manning  went  to  the  FBI  website  and  viewed  this  information. 
There's  no  evidence  that  any  of  these  three  members  —  or  these  three 
individuals  were  on  his  computer  —  the  information  about  them.  So 
it's  about  what  PFC  Manning  knew  at  the  time  of  the  commission  of  the 
offenses.  And  because  the  information  offered  was  found  on  his 
computer  is  a  permissible  inference  to  say  that  that  he  would  have 
known  that  information. 

MJ:  Well,  Captain  Tooman,  let  me  see  the  exhibits. 

[The  Assistant  Defense  Counsel [CPT  Tooman]  handed  the  document 
to  the  Military  Judge.] 

ADC [CPT  TOOMAN]:  And,  ma'am,  we  didn't  include  the  actual 
records.  They  were  fairly  voluminous;  hundreds  of  pages  in  some 
cases.  So  for  our  purposes  the  fact  that  the  records  exist,  in  our 
mind,  is  what  rebuts  the  government's  contention  that  WikiLeaks  isn't 
a  legitimate  journalistic  organization. 

MJ:  Well,  does  the  government  have  any  objection  to  this? 

TC [MAJ  FEIN]:  Well,  the  objection  is  relevance.  Your  Honor. 

The  Court  taking  judicial  notice  of  facts  that  are  not  at  least 
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related  to  an  element  of  the  offense  —  it's  not  relevant. 

ADC [CPT  TOOMAN] :  I  guess.  Your  Honor  - 

MJ:  It  really  isn't  relevant. 

ADC [CPT  TOOMAN]:  Our  belief  is  that  the  government  is  —  is 
offering  this  Tweet  as  proof  that  WikiLeaks  either  was  or  was  not  a 
legitimate  journalistic  organization.  And  I  guess  we  would  ask  for 
them  to  articulate  how  this  Tweet  —  the  substance  of  this  Tweet 
could  inform  that  decision.  And  if  they're  —  when  we're  figuring 
out  whether  or  not  WikiLeaks  is  a  legitimate  journalistic 
organization  or  not,  the  government  has  offered  this  Tweet  to  say 
that  this  is  proof  that  they're  not  a  legitimate  journalistic 
organization.  If  they're  not  doing  that  then  we  wouldn't  request 
that  these  —  that  these  documents  - 

MJ:  Well,  you  said  —  you  said  you're  offering  for  both 

purposes,  is  that  correct? 

TC [MAJ  FEIN]:  Well,  by  both.  Your  Honor,  I  mean,  it —  it's 
ultimately  what  PFC  Manning  knew  at  the  time.  So  we  are  offering  it 
to  show  that  PFC  Manning,  by  the  greater  weight  of  the  evidence, 
would  have  known  that  WikiLeaks  was  not  a  legitimate  news 
organization  based  off  the  evidence  that  was  in  front  of  him. 

MJ:  But  are  you  also  offering  it  to  rebut  Professor  Benkler's 

testimony  that  in  actuality  is  a  legitimate  or  was  at  the  time  a 
legitimate  news  organization  — 
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TC [MAJ  FEIN]:  Well,  ma'am,  we've  always  contested  - 

MJ:  -  fourth  estate? 

TC [MAJ  FEIN]:  -  essentially,  ma'am,  it's  always  —  it's  in 

the  hands  or  the  eyes  of  PFC  Manning.  And  that's  what  we  view  and 
contested  Professor  Benkler's  relevance  from  the  get-go;  it's  only 
what  PFC  Manning  knew  or  didn't  know.  Whether  it  was  or  wasn't,  it's 
his  knowledge.  So  the  government's  been  consistent  with  entire  time 
to  say  it's  all  about  what  he  did  or  didn't  know,  and  the  evidence 
has  to  relate  back  to  him.  So,  no. 

MJ:  So  asking  my  question  again. 

TC [MAJ  FEIN]:  Yes,  ma'am. 

MJ:  I  asked  you  the  first  time  and  you  said  it  was  for  both 
reasons;  to  rebut  the  fact  that  it  is  or  isn't  a  journal  --  a 
legitimate  news  organization. 

TC [MAJ  FEIN]:  Your  Honor,  we're  —  and  the  reason  I  said  both  - 
-  I  apologize  —  is  because  it's  —  it's  a  hybrid  of  the  two.  We're 
offering  it  to  show  that  PFC  Manning  knew  it  was  not  a  legitimate 
news  organization,  not  in  general  it  was  or  was  not.  It's  PFC 
Manning's  knowledge  of  it. 

MJ:  Is  this  the  only  exhibit? 

ADC [CPT  TOOMAN] :  There  should  be  three  records.  There  are 

three  records  there. 

MJ:  Oh,  they're  three  records  in  this  exhibit? 
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ADC [CPT  TOOMAN] :  Yes,  ma'am.  I  guess  in  response  to  the 

government  - 

MJ:  Well,  rather  than  prolong  this.  I'll  go  ahead  and  admit  it. 

Go  ahead. 

ADC [CPT  TOOMAN] :  Thank  you,  Your  Honor. 

CDC [MR.  COOMBS]:  Your  Honor,  the  defense  calls  CW2  Kyle 

Balonek  back  to  the  stand. 

CHIEF  WARRANT  OFFICER  TWO  KYLE  BALONEK,  U.S.  Army,  was  recalled  as  a 
witness  for  the  defense,  was  reminded  of  his  previous  oath,  and 
testified  as  follows: 

DIRECT  EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR. COOMBS] : 

Q.  Just  to  refresh  your  memory  on  —  on  your  position  at  the 
time  of  the  deployment,  right  before  the  deployment  what  was  your 
rank? 

A.  I  was  a  staff  sergeant. 

Q.  And  with  regards  to  —  in  the  garrison,  what  was  your 
position? 

A.  I  was  the  personnel  security  manager. 

Q.  Now,  in  garrison  did  PFC  Manning  ever  make  any  disloyal 
comments  to  you? 

A.  No,  sir. 

Q.  Within  your  section,  who  did  PFC  Manning  report  to? 
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A.  Reported  to  Specialist  Showman,  sir. 

Q.  And  who  did  Specialist  Showman  report  to? 

A.  At  that  time  it  was  Sergeant  Mitchell. 

Q.  And  then  who  did  Sergeant  Mitchell  report  to? 

A.  Either  before  I  went  to  Master  Analyst  it  was  Platoon 
Sergeant  Adkins  —  while  I  was  at  Master  Analyst  it  was  Sergeant 
Adkins.  Normally  it  would  have  been  myself. 

Q.  Now  while  in  garrison,  did  Specialist  Showman  ever  report 
through  the  chain  of  command  that  she  believed  that  PFC  Manning  made 
disloyal  comments? 

A.  Not  to  my  knowledge,  sir. 

Q.  While  in  garrison,  did  you  ever  hear  any  allegation  that 
PFC  Manning  made  disloyal  comments? 

A.  I  did  not,  sir. 

Q.  Would  this  be  something  that  would  you  expect  to  hear  if  it 
involved  one  of  your  Soldiers? 

A.  I  would,  sir. 

Q.  And  why  is  that? 

A.  It  goes  —  it  really  goes  against  the  oath  of  enlistment; 
bearing  true  faith  and  allegiance  to  the  United  States. 

Q.  And  if  something  like  this  did  happen,  as  a  noncommissioned 
officer  at  the  time,  would  you  expect  to  see  it  in  a  counseling 
statement? 
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A.  I  would,  sir. 

Q.  And  why  is  that? 

A.  It's  seems  to  be  something  that  needs  to  be  addressed 
through  some  sort  of  counseling,  whether  it  be  written  or  verbal. 

Q.  And  when  you're  deciding  on  written  or  verbal,  as  a 
noncommissioned  officer,  is  there  a  difference  in  your  mind  as  to 
some  things  you  might  do  verbal  and  some  things  you  might  actually 
reduce  to  writing? 

A.  There  can  be,  yes,  sir. 

Q.  And  generally  what  are  the  types  of  things  you'd  reduce  to 
writing? 

A.  Mainly  bigger  things  like  if  you're  consistently  late  or 
if,  I  mean,  there's  patterns  of  misconduct  that  need  to  be  addressed 
or  written  —  or  like  smaller  things,  like  maybe  one  time  late  or 
missing  a  formation  can  be  addressed  through  verbally,  sir. 

Q.  And  the  idea  —  have  you  ever  heard  of  the  phrase,  if  it's 
not  in  writing  it  didn't  happen? 

A.  I  have,  sir. 

Q.  What  does  that  mean  to  you? 

A.  If  you're  trying  to  prove  say  a  pattern  of  misconduct 

against  a  Soldier,  if  there's  no  supporting  documentation,  i.e.,  a 
counseling  statement,  then  there's  nothing  really  that  can  be  gone 
off  of. 
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Q.  And  from  a  analyst  standpoint,  would  disloyal  comments  to 
America  be  something  small  that  you  just  handle  verbally  or  something 
big  that  you  would  want  to  have  in  writing? 

A.  I  would  find  it  to  be  something  that  I'd  want  it  in 
writing,  sir. 

CDC [MR.  COOMBS]:  Thank  you.  No  further  questions. 

MJ:  Cross? 

CROSS-EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  Chief  Balonek,  you  worked  with  Ms.  Showman  in  garrison? 

A.  Yes,  ma'am. 

Q.  And  when  was  that? 

A.  From  the  time  she  got  there,  I  guess,  maybe  2008/2009  to 
when  I  left  in  2010. 

Q.  Okay.  And  that  was  after  the  deployment? 

A.  During  —  I  left  during  to  go  to  attend  WOCS . 

Q.  And  how  often  did  you  and  Ms.  Showman  interact? 

A.  Maybe  a  daily  basis,  but  interaction  may  have  been  more 
than  just  saying  hello  or  how  was  your  day. 

Q.  Was  that  the  same  in  garrison  as  it  was  in  theater? 

A.  A  little  difference  in  theater;  we  interacted  on  a  FUSION 
to  targeting  basis,  but  it  wasn't  —  it  varied,  ma'am. 
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Q.  And  —  and  based  on  that  relationship,  did  you  have  an 
opinion  about  whether  or  not  Ms.  Showman  is  truthful? 

A.  Yes. 

Q.  And  what  is  that  opinion? 

A.  I  found  her  —  I  found  her  truthful.  She  never  gave  a 
reason  not  to  trust  her. 

Q.  Would  you  believe  her  if  she  testified  under  oath? 

A.  I  would,  ma'am. 

Q.  And  did  she  have  a  reputation  for  truthfulness  or 
untruthfulness  in  2/10  during  that  time? 

A.  Yes. 

Q.  So  --  which  one? 

A.  For  truth. 

Q.  Oh,  okay.  Never  mind.  I'm  sorry.  So  do  you  know  what  the 
reputation  was? 

A.  It  was  for  truthfulness,  ma'am. 

Q.  Okay.  And  you  said  that  you're  at  the  Master  Analyst 
Course.  When  was  that? 

A.  It  was  from  July  of  '09  to  September  of  '09,  ma'am. 

Q.  So  you  weren't  around  in  August  2010? 

A.  I  was  not.  I  was  in  Fort  Huachuca. 

Q.  And  then  a  few  weeks  after  you  returned  in  September  of 

2010,  you  deployed  with  the  rest  of  2/10? 
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A.  Yes,  ma'am. 

Q.  So  you  barely  had  time  to  pack? 

A.  That's  about  right,  ma'am,  yes. 

Q.  And  you  said  you  would  have  expected  to  hear  about  the  — 
I'm  sorry,  I  said  2010.  I  meant  2009.  That  was  correct,  right  — 
2009. 

A.  Yes,  ma'am. 

Q.  Okay.  I  confused  you  too.  So  it  was  August  of  2009  that 
you  were  gone? 

A.  That's  correct. 

Q.  Okay.  And  you  were  at  Master  Analyst  Course  from  July  to 
August  of  2009? 

A.  Yes,  ma'am. 

Q.  And  you  said  you  would  have  expected  to  hear  about  this 
statement,  but  you  actually  weren't  around  at  that  time? 

A.  That's  true. 

Q.  And  you  would  have  expected  Ms.  Showman  to  bring  it  to 
Staff  Sergeant  Mitchell,  who  was  her  immediate  supervisor? 

A.  Yes,  ma'am. 

Q.  And  then  Master  Sergeant  Adkins  in  your  absence? 

A.  Correct. 

Q.  And  you  don't  know  whether  or  not  Ms.  Showman  brought  this 
statement  to  Staff  Sergeant  Mitchell? 
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A.  I  really  —  I  really  don't. 

ATC [CPT  OVERGAARD] :  Okay.  Thank  you. 

REDIRECT  EXAMINATION 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  With  regards  to  the  —  let's  —  the  opinion  and  reputation 
testimony,  the  opinion  testimony,  what  are  you  basing  that  on? 

A.  Just  my  own  judgment,  sir. 

Q.  And  I  wanted  to  get  an  idea  of  that  just  because  sometimes 
people  have  an  opinion  on  truthfulness  and  it's  because  they've  known 
the  person  for  a  long  time  or  they  deal  with  them  - 

ATC [CPT  OVERGAARD]:  Objection,  leading. 

CDC [MR.  COOMBS]:  I  don't  believe  I'm  leading. 

MJ:  You're  giving  just  examples. 

CDC [MR .  COOMBS]:  Yes,  ma'am. 

MJ:  Go  ahead. 

Q.  And  so  they've  known  the  person  for  a  long  time  or  they 
deal  with  them  like  hours  on  end  a  day  and  that  person  tells  them  a 
lot  of  different  things  and  they've  seen  the  through  a  pattern  that 
they're  truthful.  So  I  wanted  to  get  an  idea  from  you  which  of  — 
which  of  those  - 

MJ:  Well,  not  which  of  those. 

Q.  -  or  which  of  those,  if  any,  or  some  other  one,  is  what 

you  base  the  opinion  of  truthfulness  on? 
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A.  Sir,  I  base  the  opinion  on  the  fact  that  when  a  —  if  a 
person  does  not  give  me  a  reason  not  to  trust  them,  I  find  them 
trustworthy,  sir. 

Q.  Okay.  So  how  —  you  said  you  had  some  contact  with  her. 

How  much  contact  would  you  have  with  her  on  a  daily  basis? 

A.  It  varied  on  how  the  reporting  was  coming  in,  sir,  what 
targeting  needed  from  fusion  or  what  fusion  may  have  needed  from 
targeting.  It  could  have  once  or  twice  a  day.  It  could  have  been 
not  at  all. 

Q.  And  based  upon  that  contact,  I  guess,  did  you  feel  that  you 
got  to  know  her  well? 

A.  Well  enough  as  a  coworker,  yes. 

Q.  Would  you  consider  her  a  friend? 

A.  I  would  not,  sir. 

Q.  And  if  someone  just  asked  you  to  describe  her  as  somebody 
that  you  know  very  well  or  somebody  that  you  just  know  of  or,  I 
guess,  any  variation,  how  would  you  describe  her? 

A.  Would  you  restate  the  question,  sir? 

Q.  Right.  If  someone  asked  you  is  she  --  is  she  somebody  that 
you  know  very,  very  well,  or  is  she  somebody  that  is  just  as  an 
acquaintance  that  you  see  only  at  work  or  is  she  somewhere  in  the 
middle,  how  would  you  describe  her? 

ATC [CPT  OVERGAARD] :  Objection,  leading. 
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MJ:  Overruled. 

A.  Maybe  somewhere  in  the  middle,  sir. 

Q.  Okay.  And  then  the  —  the  opinion  testimony,  you  were 

asked  about  an  opinion  —  I  gra  —  I  guess  that's  an  opinion  within 
the  unit? 

A.  I  was  basing  on  my  opinion,  sir. 

Q.  I'm  sorry,  reputation.  I'm  confused.  The  reputation 
testimony;  you  said  she  has  a  reputation  for  being  truthful? 

A.  I  mean,  I  was  speaking  how  I  saw  it,  sir. 

Q.  So  with  regards  to  reputation,  that's  not  a  reputation  in 

the  unit  that  you're  aware  of? 

A.  I  can't  speak  for  the  unit,  sir. 

Q.  Do  you  know  of  any  reputation  like  when  --  when  someone 
says  that  person  has  a  reputation  for  X  or  for  Y,  did  —  did  then 
Specialist  Showman  have  a  reputation  that  you  were  aware  of? 

A.  Not  that  I  know  of,  sir. 

CDC [MR.  COOMBS]:  Okay. 

ATC [OPT  OVERGAARD] :  No  further  questions,  ma'am. 

MJ:  Temporary  or  permanent  excusal?  Temporary  still? 

CDC [MR.  COOMBS]:  Temporary,  ma'am. 

[The  witness  was  temporarily  excused,  reminded  of  his  previous 
warning,  and  withdrew  from  the  courtroom.] 
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CDC [MR.  COOMBS]:  Your  Honor,  the  defense  calls  Mr.  Paul 

Adkins  to  the  stand. 

PAUL  ATKINS,  civilian,  was  called  as  a  witness  for  the  defense,  was 
sworn,  and  testified  as  follows: 


DIRECT  EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  And  you  are  Mr.  Paul  Adkins  of  Watertown,  New  York? 

A .  I  am . 

Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Now,  Mr.  Adkins,  you  used  to  be  in  the  military,  is  that 
correct? 


A.  Yes,  sir. 

Q.  And  when  did  you  retire? 

A.  Twenty-eight  February  2013. 

Q.  And  how  long  were  you  in  the  military? 

A.  Over  21  years. 

Q.  At  the  time  when  you  retired  what  was  your  rank? 

A.  Sergeant  First  Class. 

Q.  In  the  2008  through  2010  timeframe,  so  just  those  two 
years,  were  you  the  NCOIC  for  the  S-2  section  of  2nd  BCT  of  10th 
Mountain  Division? 

A.  Yes,  sir. 
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Q.  And  as  the  NCOIC,  were  you  responsible  for  supervision  of 
all  enlisted  Soldiers  in  the  S-2  section? 

A.  Yes,  sir. 

Q.  And  was  one  of  those  Soldiers  PFC  Manning? 

A.  Yes,  sir. 

Q.  And  was  another  one  of  those  Specialist  Showman? 

A.  Yes,  sir. 

Q.  While  in  garrison  did  PFC  Manning  ever  make  any  statements 
to  you  that  indicated  that  he  had  a  lack  of  loyalty  to  the  United 
States? 

A.  I  don't  recall  him  saying  so. 

Q.  And  when  you  say  you  don't  recall,  are  you  saying  you  don't 
remember  or  you  don't  believe  that  happened? 

A.  I  don't  remember,  sir. 

Q.  Is  that  something  you  think  you  would  remember? 

A.  I  would  hope,  but  I  do  not  remember,  sir. 

Q.  Would  statements  about  being  disloyal  to  America  result  in 
the  suspension  of  a  security  clearance  for  an  intel  analyst? 

A.  Certainly  an  investigation,  yes. 

Q.  And  why  is  that? 

A.  Because  having  access  to  classified  information  and  then 
stating  that  you're  disloyal  to  the  country  that,  you  know,  holds  the 
classified  information  could  be  considered  a  security  risk. 
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Q.  And  as  the  NCOIC  of  the  S-2  section,  would  you  want  an 
analyst  serving  in  your  section  if  they  had  no  loyalty  to  the 
country? 

A.  No,  sir. 

Q.  And  why  is  that? 

A.  Because  they're  a  security  risk. 

Q.  Would  you  want  them  to  have  access  to  classified 
information? 

A.  No,  sir. 

Q.  And,  again,  why? 

A.  Because  they're  a  security  risk,  sir. 

Q.  So  if  you  had  that  information  on  a  particular  Soldier, 
what  would  you  do? 

A.  In  the  case  of  2008,  I  would  have  gone  to  Major  Clausen, 
because  we  were  looking  to  deploying,  and  discussed  it  with  him  and 
determined  whether  we  should  forward  this  information  up  the  chain  to 
have  him  not  deploy  or  possibly  remove  his  security  clearance  or 
something  along  those  lines. 

Q.  So  if  I  —  if  I'm  understanding  you  correctly,  if  you're 
aware  of  the  issue  you  would  do  something  to  determine  should  we  keep 
the  Soldier,  keep  the  clearance,  deploy  him  or  not,  is  that  correct? 

A.  Could  you  rephrase,  please? 
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Q.  Based  upon  what  you  just  said,  am  I  correct  in 
understanding  you,  that  if  you  had  this  allegation  or  concern  about  a 
particular  Soldier  you  would  have  taken  it  to  your  supervisor,  then 
Major  Clausen,  I  guess,  is  what  you  said? 

A.  Yes,  sir. 

Q.  And  you  would  have  made  a  decision  at  that  point  whether  to 
remove  the  Soldier's  clearance,  whether  to  keep  the  Soldier  in  the 
Army,  I  guess,  or  deploy  him,  is  that  right? 

A.  Well,  it  wasn't  our  decision  exclusively,  however,  we  would 
have  made  the  recommendation  one  way  or  the  other  in  regard  to  any  — 
any  number  of  possible  solutions. 

Q.  All  right.  So  have  you  ever  had  an  allegation  against  one 
of  your  analysts  that  they  made  disloyal  comments,  to  your  memory? 

A.  Not  that  I  recall,  no,  sir. 

Q.  Would  that  be  a  significant  thing  for  you? 

A.  Yes  —  yes,  sir. 

Q.  And  would  that  be  a  significant  thing  in  your  field  as  an 
intel  analyst? 

A.  Yes,  sir. 

Q.  And  can  you  explain  to  Colonel  Lind  why  that  would  be 
significant  to  you  and  significant  in  your  field? 

A.  Hello,  ma'am. 

MJ:  Hello. 
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A.  It  would  be  significant  because  the  Soldier  would  be  — 

would  pose  a  security  risk  as  well  as  possible  --  you  know,  maybe  he 

would  be  unsuitable  to  serve  in  a  combat  zone,  ma'am. 

Q.  And  would  that  person  potentially  be  a  unsuitable  to  be  an 

intel  analyst? 

A.  Yes,  sir. 

Q.  Now  prior  to  his  arrest  in  Iraq  in  May  of  2010,  did 
Specialist  Showman  ever  report  to  you  that  PFC  Manning  made 
statements  that  indicated  a  lack  of  loyalty  to  the  United  States? 

A.  I  don't  recall  that  she  did. 

Q.  And  when  you  say  you  don't  recall,  are  you  saying  you  don't 
remember  or  you  don't  believe  that's  true? 

A.  I  don't  remember,  sir. 

Q.  Prior  to  his  arrest  in  Iraq  in  May  of  2010,  did  Specialist 
Showman,  then  Specialist  Showman,  ever  report  to  you  that  PFC  Manning 
made  statements  that  indicated  the  America  flag  meant  nothing  to  him? 

A.  Again,  I  don't  recall  and  I  don't  remember,  sir. 

Q.  Prior  to  his  arrest  in  Iraq  in  May  of  2010,  did  Specialist 

Showman  tell  you  that  she  believed  that  PFC  Manning  was  a  spy? 

A.  I  don't  recall  and  I  don't  remember,  sir. 

Q.  Would  —  well,  actually  before  I  ask  this,  can  you  tell  me 
right  now,  as  you  sit  on  the  stand,  why  you  think  you  don't  recall 
and  don't  remember  that? 
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A.  I  mean  there  —  there  could  have  been  any  number  of 
reasons,  but  I  have  been  diagnosed  with  memory  loss.  We  were  —  and 
—  could  you  repeat  the  timeframe  that  these  statements  were 
allegedly  made,  sir,  so  I  —  because  I  believe  if  I  --  if  I  recall 
correctly,  as  far  as  the  timeframe,  we  were  looking  at  either  packing 
out  for  deployment  or  something  along  those  lines.  So  it  may  have 
been  that  I  was  involved  in  other  things.  So  I  can't  specify 
directly  why  I  would  not  recall  nor  remember  why  Specialist  Showman 
said  those  things,  sir. 

Q.  Okay.  So  let  me  break  your  answer  down  just  a  little  bit. 
First,  I  was  unaware  of  any  memory  issues.  So  what  memory  issues  do 
you  have? 

A.  In  2004,  I  suffered  from  a  fall  while  in  Iraq.  In  2005  and 
2006  and  probably  earlier,  I  began  to  have  short-term/long-term 
memory  loss  as  well  as  sort  of  like  spaces  where  I  would  lose  time. 

I  would  get  lost  without  being  on  post,  and  so  I  had  a  neuropsych 
exam  in  2006,  which  indicated  —  I  mean,  she  didn't  have  a  baseline 
by  which  to  go,  but  indicated  there  may  have  been  some  sort  of  memory 
loss  or  damage  induced  by  my  fall.  Then  in  2009  or  2010,  I  think,  I 
had  another  exam  and  that  indicated  that  there  was  some  deterioration 
or  lowering  of  my  capabilities  for  memory  from  the  2006  tests,  sir. 

Q.  And  was  any  of  this  known  by  your  command? 

A.  Yes,  sir. 
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Q.  And  did  —  did  you  feel,  I  guess,  in  the  2009  timeframe 
when  you  were  preparing  to  deploy  if  this  impacted  your  ability  to  do 
your  duties? 

A.  In  2006,  I  raised  the  concern  to  my  chain  of  command,  but  I 
was  deemed  fit  to  deploy  in  2006  and  deployed,  and  deployed  again  in 
2009,  2010,  sir. 

Q.  Okay.  All  right.  And  then  you  also  indicated  because  of 
the  deployment  you  were  focused  on  that  stuff  and  you  might  not 
remember? 

A.  That  could  have  been  reason  as  well,  yes,  sir. 

Q.  Now,  as  a  —  as  a  NCOIC,  your  20  —  all  your  21  years  was 
as  an  enlisted  I  take  it,  right? 

A.  Yes,  sir. 

Q.  So  when  something  significant  happens,  did  you  train  your 
Soldiers  to  document  that  in  a  counseling  statement? 

A.  Could  you  please  rephrase? 

Q.  Yeah.  If  a  —  if  something  significant  happens,  an 
important  issue,  would  you  train  your  NCOs  that  that  important  issue 
needs  to  be  documented  in  some  way,  on  writing,  on  paper? 

A.  I  mean,  at  some  point,  yes,  of  course. 

Q.  Okay.  And  I  take  it  that  if  an  analyst  said  they  were 
disloyal  to  America  and  the  flag  meant  nothing  to  them,  that  --  would 
that  be  a  significant  event  in  your  mind? 
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A.  Yes. 

Q.  And  would  you  instruct  whoever  saw  that  or  heard  that  to 
reduce  that  in  writing  in  a  counseling  statement  so  there's  some 
paperwork  to  rely  upon? 

A.  Likely,  yes. 

Q.  And  then,  I  guess,  if  that  was  done  where  you  had  something 
that  was  written  then  I  guess  regardless  of  your  memory  we  could  look 
at  what  was  written  three  years  later  and  we'd  see  what  allegedly 
happened? 

A.  Yes,  sir. 

Q.  In  this  case,  did  you  ever  see  a  —  a  written  sworn 
statement,  or  --  excuse  me,  a  written  counseling  statement  regarding 
any  alleged  disloyal  comments  by  my  client? 

A.  I  don't  recall  having  seen  one,  sir. 

Q.  And  when  you  say  recall,  again,  is  this  you  don't  remember 
or  you  don't  believe  that  you've  seen  any  paperwork  that  has  it? 

A.  I  don't  remember  again,  sir. 

Q.  If  no  paperwork  existed,  what  would  that  tell  you  as  the 
NCOIC  regarding  whether  or  not  this  happened? 

A.  It  wouldn't  necessarily  prove  or  disprove  the  event. 

Q.  Right. 

A.  It  would  —  it  would  be  something  that  I  would  certainly,  I 
guess,  encourage  the  supervisor  to  write  up.  But  it  wouldn't 
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necessarily  —  the  absence  of  a  counseling  statement  would  not 
necessarily  lead  me  to  believe  that  an  event  did  not  happen,  simply 
that,  for  whatever  reason,  it  was  not  written  in  writing.  And  I 
understand  that  the  use  of  counseling  statements,  you  know,  which  is 
to  record  events  and  record  the  ability  of  the  noncommissioned 
officer,  or  whomever,  to  indicate  how  this  might  be  corrected,  but, 
again,  it  doesn't  necessarily  indicate  to  me  that  the  lack  of  a 
counseling  statement  meant  that  an  event  did  not  occur. 

Q.  Okay.  And  if  —  and  I  think  you  said  on  —  earlier  if  — 
if  you  were  aware  of  something  you  would  take  it  up  through  your 
chain  to  Major  Clausen.  Is  that  the  person  you  said  at  the  time? 

A.  Depending  on  the  —  what  I  thought  would  be  the  importance, 
yes,  sir. 

Q.  Okay.  And  if  you  took  it  to  Major  Clausen;  like  if  you 
actually  raised  the  issue  with  him,  would  there  be  any  sort  of 
documentation  to  support  that  that  happened? 

A.  Not  necessarily.  I  mean,  I  briefed  Major  Clausen  or  the  S- 
2  or  whomever  I  dealt  with  on  —  I  mean,  dealt  with  regularly  on  a 
daily  basis  pertaining  to  all  personnel  issues,  equipment  issues, 
management,  deployment,  deplorability,  anything  that  a 
noncommissioned  officer  in  charge  --  excuse  me,  normally  deals  with 
and  normally  should  keep  —  should  inform  his  OIC  of,  I  spoke  with 
Major  Clausen  about.  I  didn't  have  —  I  didn't  feel  the  need  to 
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1  bring  him  counseling  statements  necessarily  because  it  was  just  an 

2  informal  chat  normally  at  the  end  of  the  day;  this  is  what's 

3  happening  with  this  person,  this  is  what's  happening  with  this  piece 

4  of  equipment;  things  along  those  lines.  So  it  wasn't  a  —  a  formal 

5  briefing  with  Major  Clausen  or  whomever,  it  was  simply  a  discussion, 

6  basically  a  very  informal  back  brief  from  myself  to  the  OIC. 

7  Q.  Yeah,  and  I  think  what  I  was  asking,  like,  if  you  had  a  — 

8  a  major  event  where  one  of  your  analysts  said  something  disloyal  — 

9  profess  to  have  no  loyalty  to  the  country,  and  you  were  reporting 

10  that  to  Major  Clausen,  so  you  believed  that  was  a  major  event,  would 

11  there  —  would  that  be  captured  in  any  way,  shape,  or  form  in 

12  writing,  documentation,  or  otherwise? 

13  A.  I  guess  I'm  not  understanding  the  question. 

14  Q.  I  can  repeat  it.  So  what  I'm  asking  is,  like,  if  —  let's 

15  say  Specialist  Showman  did  come  to  you  and  said  PFC  Manning  just  said 

16  he  had  no  loyalty  to  the  country,  the  flag  means  nothing  to  him,  and 

17  I  believe  he's  a  spy.  And  then  you  said,  okay,  that's  serious.  I'm 

18  going  to  take  it  to  Major  Clausen  and  I'm  going  to  report  what  was 

19  just  said,  would  there  be  any  sort  of  documentation  when  you  did 

20  that? 

21  A.  You  mean  would  I  have  brought  documentation  to  Major 

22  Clausen? 

23  Q.  Or  would  it  be  created  once  you  talked  to  Major  Clausen? 
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A.  I  mean,  it  would  be  created  normally  by  the  supervisor. 

And  I  would  talk  to  Major  Clausen  independently.  So  I  don't  know  if 
that's  the  answer  you're  looking  for,  sir,  but. 


Q. 

I'm  just  wondering  if  there's  some  way  we  can  see  writing 

on  this. 

Would  a  derog  —  do  you  know  what  a  derog  is? 

A. 

Of  course. 

Q. 

Would  a  derog  be  something  that  might  --  well,  actually, 

first,  before  we  go  to  that  question  —  your  understanding,  what's  a 


derog? 

A. 

Derogatory  report  would  be  any  information  that  the 

commander 

reports  to  —  okay  —  hold  on.  A  derogatory  report  would 

be  anything  that  —  that  we  could  use  to  present  to  the  commander 
that  might  affect  the  ability  of  a  Soldier  to  be  trusted  with 
classified  information. 


Q. 

And  if  a  commander  files  a  derog,  who  does  that  go  to? 

A. 

It  goes  eventually  to  a  central  clearance  facility,  I 

believe 


Q. 

And  what  —  why  would  it  go  there?  What  is  central 

clearance 

facility? 

A. 

They  are  the  --  they  maintain  records  and  can  adjudicate 

the  access  personnel  have  to  classified  information. 

Q.  And  when  a  commander  files  a  derog  —  have  you  ever  seen 
that  happen  before? 
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1  A.  Yes,  sir. 

2  Q.  Okay.  And  when  a  commander  files  a  derog,  is  that  on  any 

3  sort  of  paperwork? 

4  A.  Yes,  sir. 

5  Q.  And  what  type  of  activities  or  events  might  precipitate  a 

6  derog  being  filed? 

7  A.  Any  number.  I  mean  - 

8  Q.  Can  you  give  us  an  example? 

9  A.  Drug  use,  DUI,  larceny,  assault,  spouse  or  child  abuse.  I 

10  mean,  any  criminal  activity  would  be  normal  —  would  normally 

11  initiate  the  commander  being  notified  that  this  might  be  an  issue 

12  that  would  affect  a  Soldier's  ability  to  handle  classified 

13  information. 

14  Q.  And  let's  just  use  one  of  your  examples,  a  DUI.  How  would 

15  a  DUI  be  something  that  would  affect  a  Soldier's  ability  to  handle 

16  classified  information? 

17  A.  What  a  DUI  essentially  might  show  is  that,  for  one,  a 

18  Soldier  might  lack  discretion.  Two,  alcohol  abuse  is  normally  —  may 

19  cause  activities  that  can  have  the  Soldier  blackmailed  if  he  does 

20  something  stupid.  It  indicates  that  he  might  be  —  he  might  believe 

21  that  certain  rules  apply  to  others  but  not  to  him,  a  lack  of 

22  judgment,  a  lack  of  maturity;  something  --  something  like  that. 

23 
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Q.  And  I  guess  if  a  DUI  or  some  of  the  other  things  you  listed 
could  result  in  a  derog,  then  would  somebody  saying  I  don't  have 
loyalty  to  the  country,  the  American  flag  means  nothing  - 

ATC [CPT  OVERGAARD] :  Objection,  leading. 

MJ:  Overruled. 

Q.  So  would  somebody  saying,  I  don't  have  loyalty  to  the 
country  and  the  American  flag  means  nothing  to  me  be  something  you 
would  expect  a  derog  to  be  filed  on? 

A.  Normally,  yes.  Yes,  sir.  I  would  say  yes. 

Q.  Why? 

A.  Because  it  would  indicate  that  the  person  making  the 
statement  could  not  be  trusted  with  information  that  was  classified. 

Q.  And  in  this  instance  here  with  PFC  Manning,  are  you  aware 
whether  or  not  if  any  derog  was  filed  against  him? 

A.  Could  you,  please,  repeat  or  rephrase? 

Q.  Yes.  Are  you  aware  of  any  derog  being  filed  against  PFC 
Manning  --  and  we'll  go  before  the  deployment? 

A.  Oh,  prior  to  the  deployment? 

Q.  Uh-hu. 

A.  I  am  not  aware. 

Q.  Now,  let's  talk  about  the  deployment.  Are  you  aware  of  a 
derog  being  filed  against  now  PFC  Manning  in  the  deployment? 

A.  Yes,  sir. 
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Q.  And  I  take  it  this  was  a  derog  filed  after  he  was  arrested? 

A.  Yes,  sir.  Well,  I'm  not  100  percent  sure  of  the  time.  I 

don't  recall  whether  the  derog  was  initiated  for  the  assault  or 
whether  it  was  initiated  because  he  was  basically  charged  twice  in  a 
relatively  short  span  of  time.  So  I  don't  recall  whether  the 
derogatory  report  —  excuse  me  —  was  filed  against  PFC  Manning  in 
response  to  the  assault  or  in  response  to  his  arrest  for  disclosure. 

Q.  In  fact,  was  PFC  Manning  removed  from  the  SCIF  prior  to  his 
arrest? 

A.  Yes,  sir. 

Q.  And  what  was  this  in  response  to? 

A.  It  was  in  response  to  an  assault,  sir. 

Q.  And  when  he  was  removed  from  the  SCIF  was  his  --  were  -- 
are  you  aware  whether  or  not  action  was  taken  to  on  suspend  his 
ability  to  get  on  a  SIPR  computer? 

A.  I  don't  recall.  I  know  he  was  removed  from  the  SCIF. 

Again,  I  don't  recall  a  100  percent  whether  action  was  initiated  to 
affect  his  access  at  that  time  or  whether  it  was  initiated  after  he 
left  theater. 

Q.  Okay.  During  the  deployment  did  you  ever  write  any 
memorandums  for  record  to  document  the  behavior  of  PFC  Manning? 

A.  Yes,  sir. 
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Q.  And  in  a  moment  I'm  going  to  talk  to  you  about  one  of 
those,  but  do  you  recall  doing  one  of  them  in  the  December  of  2009 
timeframe? 

A.  I'm  trying  to  remember  it  was  it  2008  or  2009?  I  don't  - 

Q.  I'll  show  it  to  you  in  a  second. 

A.  Okay. 

CDC[MR.  COOMBS]:  I'm  showing  you  what's  been  marked  Defense 

Exhibit  XX  for  identification  [handing  the  document  to  the  witness] . 
Can  you  look  at  that? 

WIT:  Yes,  sir. 

[The  witness  did  as  directed.] 

Q.  And  do  you  recognize  that? 

A.  Yes,  sir. 

Q.  And  can  you  tell  Colonel  Lind  what  that  is? 

A.  Ma'am,  this  was  a  memorandum  for  record  I  wrote  in  regard 
to  Specialist  Manning  which  I  presented  to  the  —  I  guess  he  was  the 
combat  stress  officer  in  relation  to  some  behavioral  issues  that 
Specialist  Manning  was  exhibiting. 

Q.  Now,  when  was  this  memorandum  written? 

A.  It  says  here  21  December  2009,  sir. 

Q.  Does  that  sound  right  to  you? 

A.  I  mean,  I'm  just  trying  to  remember  the  timeframe  that  we 
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1  deployed.  I  just  can't  remember  exactly  —  I  mean,  honestly,  if  it 

2  was  2008  or  2009,  but  - 

3  Q.  Would  you  normally  date  memorandums  the  correct  date? 

4  A.  Of  course  I  would.  So  —  sure.  I  guess  so.  I  guess 

5  that's  right,  sir.  I  guess  so.  Yes,  sir. 

6  Q.  And  what's  the  subject  line  of  the  memorandum? 

7  A.  Behavior  of  Specialist  Bradley  Manning,  sir. 

8  Q.  And  do  you  reference  activity  of  then,  I  guess.  Specialist 

9  Manning  in  the  June  and  July  timeframe  of  2009? 

10  A.  I  do,  yes,  sir,  in  Paragraph  Two. 

11  Q.  And  that  behavior  —  who  was  that  behavior  involving?  Who 

12  was  around  at  that  time,  do  you  recall? 

13  A.  Myself,  Specialist  Showman,  and  —  I  can't  remember  if  he 

14  was  promoted  or  not  at  the  time,  and  I  guess  here  —  Specialist 

15  Manning,  sir. 

16  Q.  So  this  was  an  incident  that  you  documented  that  involved 

17  you.  Specialist  Showman,  and  then  either  PFC  or  Specialist  Manning, 

18  right? 

19  A.  Yes,  sir,  that's  correct. 

20  CDC [MR.  COOMBS]:  I'm  retrieving  what  has  been  marked  Defense 

21  Exhibit  XX  for  identification  [retrieving  the  document  from  the 

22  witness] .  Actually  before  I  do  that,  I'm  handing  the  witness  back 

23  the  exhibit  [handing  the  document  to  the  witness] . 
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Q.  Anywhere  in  that  exhibit  do  you  see  —  and  you  can  look  and 
take  your  time,  but  do  you  see  anything  that  references  any  sort  of 
disloyal  comments  made  by  PFC  Manning  or  Specialist  Manning  to 
Specialist  Showman  in  —  in,  I  guess,  maybe  the  July/August  timeframe 
of  2009? 

[The  witness  reviewed  the  document.] 

A.  I  don't  see  anything  that  references  that,  sir. 

Q.  And  when  you're  documenting  behaviors  of  PFC  Manning  for 
behavioral  health  that  might  be  of  some  concern,  do  you  think  you 
would  document  that  fact  in  this  memorandum? 

A.  The  disloyal  comments  fact? 

Q.  Yeah,  if  that  happened.  Do  you  think  that  might  be 
something  that  you  would  document? 

A.  I  don't  know  if  I  would  or  not.  And  the  reason  I  might  not 
have  was  the  subject  line  of  the  memorandum  pertained  to  outbursts 
rather  than  other  comments.  So  the  intent  of  this  memorandum  for 
record  was  to  —  to  capture  events  that  I  thought  might  be  relevant 
and  might  be  helpful  to  a  behavioral  health  professional  when 
treating  a  patient,  sir. 

Q.  Okay.  So  with  regards  to  if  somebody  said,  I  don't  have 
loyalty  to  the  country,  the  flag  means  nothing  to  me,  you  wouldn't 
consider  that  to  be  potentially  something  that  a  behavioral  health 
specialist  would  want  to  know  about  the  person's  mental  state? 
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A.  Maybe.  I  just,  again,  what  the  —  the  intent  of  the 
memorandums  for  record  was  primarily  to  ensure  that  I  was  providing  a 
viewpoint  from  another  perspective  regarding  what  I  thought  were 
behavioral  health  issues.  And  I  can't  say  entirely  why  I  would  have 
omitted  that  information  unless  I  either  did  not  recall  having  heard 
it  or  I  didn't  consider  it  relevant  to  a  behavioral  health 
specialist,  sir. 

Q.  Is  there  one  more  possibility  and  that  possibility  being 
that  it  didn't  happen?  Is  that  possible? 

A.  What  didn't  happen? 

Q.  The  statements. 

A.  I  mean  —  I  guess  it  could  be  possible,  sir. 

Q.  And  I  understand  you're  saying  you  don't  remember 
Specialist  Showman  coming  to  you.  Do  you  think  your  memory  would 
improve  if  she  came  to  you  on  more  than  one  occasion  with  the  same 
complaint? 

A.  Maybe,  sir.  I  mean  —  it's  possible. 

Q.  And  do  you  —  well,  I  guess  if  you  don't  remember  her 

saying  this  to  you,  am  I  correct  that  you  don't  remember  her  coming 
to  you  on  multiple  occasions? 

A.  About  that  specific  statement?  No,  I  don't  recall  it. 
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1  Q.  And  you  don't  recall  —  or  do  you  recall  ever  addressing 

2  any  sort  of  loyal/disloyal  statements  regarding  PFC  Manning  at  any 

3  time? 

4  A.  Could  you  please  rephrase  or  repeat.  I'm  sorry. 

5  Q.  Not  a  problem.  Do  you  —  at  any  time  —  now  we  talked 

6  about  before  the  deployment  or  whatnot  - 

7  A.  Yes,  sir. 

8  Q.  -  at  any  time  do  you  recall  addressing  any  sort  of 

9  disloyal  statements  by  PFC  Manning? 

10  A.  Only  after  he  was  —  is  this  after  he  was  arrested? 

11  Q.  No.  At  any  time. 

12  A.  Well,  then  after  he  was  arrested,  whenever  we  initiated 

13  that  —  at  some  point,  we  initiated  a  derog,  but  before  that,  no. 

14  CDC [MR.  COOMBS]:  Retrieving  Defense  Exhibit  XX  for 

15  identification  from  the  witness  [retrieving  the  document  from  the 

16  witness] ,  and  offering  Defense  Exhibit  XX  for  identification  into 

17  evidence  [handing  the  document  to  the  Military  Judge] . 

18  MJ:  Any  objection? 

19  ATC [CPT  OVERGAARD] :  One  moment,  please.  Your  Honor. 

20  [Pause] 

21  ATC [CPT  OVERGAARD]:  No,  ma'am. 

22  MJ:  All  right.  Defense  Exhibit  XX  is  admitted. 

23  CDC [MR.  COOMBS]:  No  further  questions. 
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MJ:  Redirect? 

ATC [CPT  OVERGAARD] :  Yes,  ma'am. 

RECROSS-EXAMINATION 

Questions  by  the  assistant  trial  counsel  [CPT  OVERGAARD] : 

Q.  Cross  just  to  clarify.  Mr.  Adkins,  you  said  that  you  — 
you  didn't  remember  Specialist  Showman  making  the  statement  to  you  or 
reporting  it  to  Major  Clausen,  is  that  correct  —  the  disloyal 
statement  that  she  said  PFC  Manning  told  her? 

A.  I  do  not  remember,  correct.  Yes,  ma'am. 

Q.  Would  one  of  your  past  writings  help  refresh  your  memory? 

A.  If  it  can,  yes,  ma'am. 

ATC [CPT  OVERGAARD]:  Retrieving  Prosecution  Exhibit  197,  ma'am. 
MJ:  What  is  it? 

ATC [CPT  OVERGAARD]:  It's  a  memorandum  written  by  Mr.  Adkins  for 
an  appeal  of  an  administrative  reduction,  ma'am. 

[The  assistant  trial  Counsel  retrieved  the  document  from  the  court 
reporter  and  handed  it  to  the  witness] . 

Q.  I  know  this  is  kind  of  hard  to  read,  but  can  you  read 
Paragraph  Three  and  then  just  let  me  know  when  you're  done? 

A.  [Reading  from  the  document]  First,  the  gover  - 

Q.  Well,  just  —  just  read  it  to  yourself  please? 

A.  Sorry. 

[The  witness  did  as  directed.] 
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Q.  Does  that  help  refresh  your  memory? 

A.  What  I  would  say  is  that  it  does  not  refresh  my  memory  of 
that  —  of  a  specific  statement  made  my  —  made  by  Specialist  Showman 
in  regards  to  his  comments.  I  see  obviously  that  I  wrote  it,  but  I  - 
-  having  reread  it  --  or  having  read  it  does  not  bring  back  a  memory 
of  a  statement  of  her  having  said  it,  ma'am. 

Q.  But  in  this  statement  you  wrote  that  —  and  this  statement 
was  on  - 

CDC [MR .  COOMBS]:  Objection,  Your  Honor. 

MJ:  Yes. 

CDC[MR.  COOMBS]:  She's  trying  to  refresh  memory.  She  now 

needs  to  move  on. 

MJ:  You  haven't  refreshed  his  recollection. 

ATC [CPT  OVERGAARD] :  Yes,  ma'am.  One  moment? 

MJ:  Is  there  something  else  you'd  like  to  do? 

[Pause] 

Q.  Do  you  remember  preparing  this  statement? 

A.  Yes,  ma'am. 

Q.  And  when  was  that  —  do  you  remember? 

A.  It  was,  I  believe,  June  of  2011,  after  my  administrative 
reduction  board  in  which  I  was  appealing  the  decision  to  reduce  me 
from  master  sergeant  to  sergeant  first  class. 
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Q.  And  when  you  wrote  this  memorandum,  was  what  you  wrote  in 
here  accurate? 

A.  I  signed  it,  so  I  must  have  read  it.  So  I  must  have 
believed  that  it  was  accurate. 

Q.  And  this  was  —  you  wrote  this  two  years  ago,  is  that 
correct? 

A.  Yes,  ma'am.  2011,  correct. 

Q.  So  when  you  wrote  the  memo,  your  memory  would  have  been 
probably  better  than  it  is  now? 

A.  Maybe.  I  mean,  I  can't  say  for  certain.  But  —  because  I 
don't  know  if  --  if  time  is  —  necessarily  affects  my  memory  or  not, 
but  that's  something  that  —  that  could  be  determined  as  yes. 

Q.  Mr.  Adkins,  would  you  please  just  read  paragraph  three  from 
this  document? 

CDC [MR .  COOMBS]:  Objection,  Your  Honor,  foundation. 

MJ:  What's  missing? 

CDC [MR.  COOMBS]:  This  —  the  individual  hasn't  said  that  his 

memory  was  fresh  at  the  time,  so  recollection  to  report  a  foundation 
hasn't  been  established. 

MJ:  All  right.  Do  you  want  to  continue  on  with  the  foundation? 

I'll  sustain  it. 

Q.  You've  agreed  that  two  years  ago  was  closer  to  when  this 
statement  was  actually  made  then  today? 
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A.  Yes,  ma'am. 

Q.  And  you  would  agree  that  you  already  said  that  this  was 
accurate? 

A.  I  would  say  that  I  signed  it.  So  when  I  read  it,  I  must 
have  believed  it  to  be  accurate,  yes. 

Q.  So  if  you  wrote  something  in  this  statement  you  would  think 
it's  true,  correct? 

A.  This  statement  was  composed  by  dictation,  I  believe,  with 
one  of  my  lawyers,  but  when  he  completed  the  —  when  he  completed 
writing  the  statement  and  printed  it,  I  read  it,  and  at  the  time 
determined  it  to  be  accurate  and  signed  it. 

Q.  You'd  agree  that  if  you  remembered  something  then  that  you 
don't  remember  now,  your  memory  would  have  been  better  about  that 
particular  event  at  the  time  that  you  wrote  it? 

A.  Could  you  rephrase,  please? 

Q.  Yes.  If  you  wrote  something  in  this  statement  that  you 
don't  remember  right  now,  would  you  agree  that  your  memory  must  have 
been  better  than  it  is  right  now? 

A.  It  recalled  the  incident,  yes  —  yes,  ma'am. 

ATC [CPT  OVERGAARD] :  I'm  handing  the  witness  Prosecution  - 

MJ:  Yes  [speaking  to  the  defense]? 

ATC [CPT  OVERGAARD]:  -  Exhibit  197  for  identification  [handing 

the  document  to  the  witness.] 
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CDC [MR .  COOMBS]:  I'm  just  going  to  object  based  upon  the 
witness'  testimony.  I  believe  now  this  is  a  statement  by  his  attorney 
as  opposed  to  him.  So  we'd  object  to  that. 

MJ:  I'm  overruling  it.  Past  recollection  recorded.  Go  ahead. 

Q.  Would  you  please  just  read  out  loud  Number  Three  on  your 
memorandum? 

A.  Yes,  ma'am.  [Reading  from  the  document]  First,  the 
government  called  Specialist  Jihrleah  Showman  as  a  telephonic 
witness.  Specialist  Showman,  immediate  supervisor  of  PFC  Manning  for 
a  period  in  Iraq,  properly  testified  and  stated  that  I  had 
reservations  about  deploying  PFC  Manning  into  theater,  and  informed 
the  chain  of  command  about  my  concerns.  Specialist  Showman  also 
correctly  stated  that  I  informed  Major  Clifford  Clausen,  Brigade  S-2, 
about  PFC  Manning's  disloyal  statements  prior  to  deployment. 

Q.  All  right.  You  can  stop  there. 

A.  Yes,  ma'am. 

Q.  Retrieving  Prosecution  Exhibit  197  for  identification 
[retrieving  the  document  from  the  witness] . 

MJ:  What's  the  date  of  that  statement? 

ATC [CPT  OVERGAARD] :  23  June  2011. 

Q.  Now  you  testified  that  you  don't  remember  whether  or  not 
there  was  a  written  counseling  made  at  the  time? 

A.  That's  correct,  yes,  ma'am. 
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Q.  And  it's  that  you  don't  remember,  not  that  you  don't  know 
that  there  —  whether  or  not  there  was  one? 

A.  I  don't  recall  and  I  don't  remember,  I  believe,  yes,  ma'am. 

Q.  Okay.  And  in  the  August  2009  time  period,  was  that  right 
before  you  were  deploying  for  your  fourth  time? 

A.  Yes,  ma'am. 

Q.  And  was  that  —  what  were  you  doing  during  that  time. 

A.  Likely  we  were  either  uploading  the  equipment,  inspecting 
sensitive  items  —  CONEXs,  moving  equipment  to  the  airfield  --  I 
don't  know  if  we  went  on  leave  at  the  time,  but  that  may  have  been 
one  of  the  things  that  we  were  looking  at  —  determining  the  order  of 
personnel  deploying;  who  was  going  to  fulfill  what  roles,  who  was 
going  to  carry  what  equipment,  who  was  going  to  bring  with  computers, 
when  certain  personnel  would  be  needed  at  which  times  in  theater. 
There  were  a  lot  of  considerations  that  Major  Clausen  and  I  covered 
prior  to  the  deployment,  ma'am. 

Q.  You  had  a  lot  going  on  at  the  time? 

A.  Yes,  ma'am. 

Q.  Was  it  —  was  it  a  stressful  time? 

A.  Yes,  ma'am. 

Q.  What  are  some  reasons  that  maybe  something  might  not  get  — 
get  written  into  a  counseling? 

A.  One  reason  is  that  we  had  --  I  mean,  people  were  busy 
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preparing  for  deployment.  It  could  have  been  that  the  computers  that 
we  normally  —  or  the  printers  that  we  actually  used  were  packed.  It 
may  have  been  that  it  just  slipped  people's  mind  because  everyone  had 
specific  tasks  which  had  to  be  accomplished  in  preparation  in  support 
of  the  combat  mission.  Anything  along  those  --  those  lines  may  have 
trumped,  I  guess,  a  counseling  statement,  or  something  entirely 
different.  I  just  don't  recall. 

Q.  You  don't  —  you  don't  always  do  written  counseling 
statements,  do  you? 

A.  Well,  I  mean  —  myself  as  the  NCOIC? 

Q.  Yes. 

A.  I  would  normally  leave  those  tasks  to  the  first-line 
supervisor.  My  counseling  statements  would  normally  go  over  my 
section  sergeants  and  things  along  those  lines.  So  the  junior  —  the 
subordinate  —  junior  leaders  would  counsel  their  subordinates.  I 
normally  counsel  my  section  NCOs .  So  a  normal  behavioral  or 
disciplinary  counseling  statement  would  not  be  something  which  I 
would  normally  compose  when  it  concerned  a  junior  Soldier  who  had  a 
first-line  supervisor. 

Q.  And  Mr.  Coombs  talked  about  derogs. 

A.  Yes,  ma'am. 
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Q.  And  you  didn't  —  before  the  end  of  the  deployment  time 
period,  you  didn't  file  a  derog  for  any  of  PFC  Manning's  behavioral 
issues? 


A. 

Yes,  ma'am,  that's  correct. 

Q. 

And  do  you  know  why  not? 

A. 

Could  you  please  rephrase  the  question? 

Q. 

Sure.  Was  there  —  was  there  any  reason  that  you  didn't 

feel  it  was  necessary  to  file  a  derog  before  when  a  derog  was 
actually  filed? 

A.  I  don't  —  I'm  not  —  I  don't  —  I  don't  recall.  I  can't 
say  for  certain.  Maybe  I'm  —  I'm  tripping  on  the  question.  I'm 


sorry. 

Could  you  please  try  one  more  time? 

Q. 

Sure.  When  you  said  that  a  derog  —  you  didn't  remember  a 

derog 

being  filed  before  the  —  before  about  the  May  2010  time 

period? 


A. 

That's  correct. 

Q. 

And  with  some  of  the  other  behavioral  issues  that  you  spoke 

about. 

for  example,  in  the  memorandum  that  Mr.  Coombs  showed  you  - 

A. 

Okay. 

Q. 

-  why  wouldn't  you  have  done  a  derog  for  that? 

A. 

Well,  there  was  --  there  were  a  couple  of  reasons.  One,  I 

needed 

—  we  actually  had  a  mission  going  on,  so  I  did  need  Soldiers 

to  perform.  While  we  were  concerned  with  some  of  Specialist 
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1  Manning's  or  PFC  Manning's  behavioral  issues,  we  felt  that  we  had  in 

2  placed  measures  to  mitigate  risk,  keep  him  functional  and  effective, 

3  while  maintaining  combat  effectiveness  in  theater. 

4  ATC [CPT  OVERGAARD] :  One  moment. 

5  WIT:  Yes,  ma'am. 

6  ATC [CPT  OVERGAARD]:  No  further  questions,  ma'am. 

7  [Pause] 

8  REDIRECT  EXAMINATION 


9  Questions  by  the  civilian  defense  counsel  [MR.  COOMBS] : 

Q.  Mr.  Adkins,  you  gave  several  statements  in  this  case, 
ect? 

A.  Sworn  statements? 

Q.  Yes. 

A.  Yes,  sir. 

CDC[MR.  COOMBS]:  I'm  showing  you  now  what's  been  marked  as 

16  Defense  Exhibit  YY  for  identification  [handing  the  document  to  the 

17  witness] .  Will  you  to  look  at  that  and  tell  me  what  that  is? 

[The  witness  did  as  directed. ] 

A.  It's  a  sworn  statement  I  wrote  on  10  June  2010,  sir. 

Q.  And  do  you  remember  why  you  wrote  this  sworn  statement? 

It  was  in  support  of  an  initial  investigation  against  PFC 
fter  his  arrest,  sir. 

Q.  And  whose  —  whose  handwriting  is  that  statement  in? 
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A.  It's  mine,  sir. 

CDC [MR.  COOMBS]:  All  right,  I'm  now  showing  you  Defense 

Exhibit  ZZ  for  identification  [handing  the  document  to  the  witness] . 
Can  you  look  at  that? 

[The  witness  did  as  directed. ] 

A.  Yes,  sir. 

Q.  Now  what's  that? 

A.  It's  a  sworn  statement  I  wrote  on  3  July  2010,  at  FOB 
Hammer,  Iraq,  in  response  to  the  investigation  against  PFC  Manning, 
sir . 

Q.  Whose  handwriting  is  that  in? 

A.  It's  mine,  sir. 

Q.  Do  you  recall  who  —  was  it  CID  that  was  asking  these 
questions? 

A.  I  don't  remember,  sir.  I  mean,  it  may  have  been  —  I  —  I 
think  it  was.  I  don't  —  I  don't  remember  exactly,  sir. 

CDC [MR.  COOMBS]:  I'm  showing  you  now  Defense  Exhibit  AAA  for 

identification  [handing  the  document  to  the  witness] .  Can  you  look 
at  that  and  tell  me  what  that  is? 

[The  witness  did  as  directed.] 

A.  It's  a  sworn  statement,  15  July  2010,  and  a  question  list 
in  regards  to  a  15-6  investigation  written  by  a  chief  network 
engineer  for  J-6,  tactical  operations,  sir. 
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1 

Q. 

Now  you  - 

2 

MJ: 

I'm  sorry,  what  was  the  date  you  said 

of  the  statement? 

3 

WIT: 

Ma'am,  it  was  15  July  2010. 

4 

MJ: 

Thank  you. 

5 

Q. 

Now  in  any  of  these  three  statements. 

the  one  on  June  101 

6  2010,  July  3rd,  2010,  or  July  15th,  2010,  do  you  reference  any 

7  disloyal  statements  allegedly  made  by  PFC  Manning? 

8  A.  Can  you  give  me  a  couple  of  minutes  to  check  them  out,  sir? 

9  Q.  Yeah,  go  —  take  the  time  you  need. 

10  A.  Thanks. 

11  [Pause  while  the  witness  reviewed  the  documents.] 

12  WIT:  Could  you  please  repeat  the  question,  sir? 

13  Q.  Yeah.  In  any  one  of  those  statements  do  you  reference 

14  disloyal  comments  being  allegedly  made  by  PFC  Manning? 

15  A.  No,  sir. 

16  Q.  And,  again,  these  —  these  statements  are  June  10th,  July 

17  3rd,  and  July  15th  of  2010? 

18  [Pause] 

19  A.  Yes,  sir. 

20  Q.  Were  the  events  of  what  happened  fresher  in  your  mind  at 

21  the  time  that  you  wrote  those  statements  in  your  own  handwriting  than 

22  currently  now  on  the  stand? 

23 
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A.  I  guess  time-wise,  yes.  I'm  not  —  time-wise,  yes  —  I 
guess  so.  Yes,  sir. 

Q.  If  at  the  time  you  had  known  about  disloyal  statements,  do 
you  think  that  might  be  something  you  would  include  in  a  sworn 
statement? 

A.  Likely,  yes,  sir. 

Q.  In  —  in  this  instance  why  do  you  think  it  would  be  likely 
when  CID  is  asking  you  questions  and  investigating  this  case  that  you 
would  include  that  information  if  you  knew  it? 

A.  Because  it  was  pertinent,  sir. 

Q.  And  the  fact  that  those  allegations  are  not  present  in 
those  statements,  what  does  that  tell  you? 

A.  It  tells  me  that  I  didn't  write  them,  sir. 

Q.  Could  it  also  possible  tell  you  that  it  didn't  happen? 

A.  It  tells  me  that  when  I  wrote  these  statements  I  did  not 

recall  nor  remember  those  statements,  sir. 

Q.  And  all  of  these  statements  are  made  before  the  statement 
that  the  trial  counsel  shared  with  you  on  22  June  2011,  right? 

A.  Yes,  sir. 

CDC [MR .  COOMBS]:  Let  me  retrieve  that  [retrieving  the 

document  from  the  witness].  I'm  handing  you  Prosecution  Exhibit  197 
for  identification  [handing  the  document  to  the  witness] . 

WIT:  Yes,  sir. 
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1  Q.  And  that's  not  in  your  handwriting,  is  it? 

2  A.  No,  sir. 

3  Q.  And  I  believe  you  said  on  cross  that  your  attorney  wrote 

4  this  for  you? 

5  A.  He  was  the  one  who  was  entering  it  onto  the  Word  document, 

6  yes,  sir. 

7  Q.  And  what  was  this  memorandum  written  --  I  think  you  had 

8  testified  actually  on  cross  that  this  was  in  response  to  the  grade 

9  reduction  board? 

10  A.  It  was  written  as  an  appeal  to  the  —  in  response  to  my 

11  reduction. 

12  Q.  And  at  that  point,  I  guess,  the  board  had  made  the 

13  selection  —  had  already  made  the  determination  to  reduce  you? 

14  A.  Yes,  sir. 

15  Q.  And  if  I'm  understanding  you  correctly  then,  this  was  going 

16  to  the  convening  authority  or  the  approval  authority  to  say,  don't 

17  approve  the  board's  recommendation? 

18  A.  It  was  an  appeal  to  dismiss  the  board's  recommendation, 

19  yes,  sir. 

20  Q.  And  at  the  time  that  you  wrote  this,  did  you  want  to  be 

21  reduced  in  rank?  Or  —  excuse  me,  at  the  time  your  attorney  wrote 

22  this  for  you,  did  you  want  to  be  reduced  in  rank? 

23  A.  No,  sir. 
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